WiFi Penetration Testing & Auditing Tool
Freeway for Network Pentesting
Read the article about Freeway, now on
Medium
[!NOTE]
User will not be prompted to accept EULA anymore!
Therefore, by downloading the software, user automatically agrees to follow every guideline specified in EULA section below.
Freeway is a Python scapy-based tool for WiFi penetration that aim to help ethical hackers and pentesters develop their skills and knowledge in auditing and securing home or enterprise networks.
Description of the features can be found in Section 6
It is necessary to have:
Optionally, install Scapy and Rich packages for Python if not installing via pip (see Section 4)
Option A: Install via PyPi (RECOMMENDED)
$ sudo pip install 3way
Option B: Install or run manually
First, clone the repository:
git clone https://github.com/FLOCK4H/Freeway
Navigate to the cloned repository:
cd Freeway
Option 1: Install dependencies, folders, and Freeway. (RECOMMENDED)
This will allow to launch the tool from anywhere
sudo pip install .
Option 2: Run without installation using Python.
Must be called from the /Freeway directory
sudo pip install scapy rich
sudo python Freeway
This tool comes with its own command line interface (CLI) and can be run without specifying any additional arguments.
sudo Freeway
Follow the prompt to select the network adapter (see Section 3):
[!TIP}
These screenshots show Freeway in its very first iteration, these do not reflect how software looks now, and are to change in the future.
Select the feature and parameter(s):
And with the additional arguments, to skip the CLI partially or completely.
sudo Freeway -i wlan2 -a monitor -p 1,2,a
‘-p’ is not required with ‘-a’, e.g., this will prompt for parameters to specify in the CLI:
sudo Freeway -i wlan2 -a deauth
All arguments, actions, and parameters:
Arguments: -h, --help Show the help message.
-i, --inf Specify the WLAN interface (e.g., wlan0, wlan1).
-a, --action Action number or alias (e.g., 1 or monitor).
-p, --params Parameter identifiers (e.g., 1,2,a or 3rtv, depends on action).
Actions:
1 or monitor,
2 or deauth,
3 or beacon_spam,
4 or fuzzer,
5 or audit,
6 or hopper,
7 or eviltwin
8 or packet_crafterParameters must be provided in the same format as in the CLI, specific for every action.
To list all parameters for a given action, just provide -a argument without -p.
index.html
trying to associate with the network we spoof.1Access Points
2Transceive and receive at the same time
In case where Freeway doesn’t meet the expectations and was installed via pip, the removal process is as easy:
sudo pip uninstall 3way
1) Users must strictly adhere to local legal guidelines
2) Users must not disrupt, introduce chaos, cause damage to others, or to other devices in any circumstances
3) Redistribution of this software must comply with MIT license standards
4) The author disclaims all liability for any damage caused by the use of this software
5) In the event of an investigation, the author will not provide assistance to any parties
Remember, the purpose of Freeway is to identify vulnerabilities, not to exploit them!
✅ Evil Twin attack
✅ Version & update checker
✅ PyPi Release
✅ Packet Crafter
❎ Freeway v1.5
19.05
- Fixed rare RuntimeError in deauth.py caused by iterating on dynamicly changing size dictionary
- Further improvements of beacon packet formatting in beacon_spam.py
27.05
- Added
updater.py
- Added
evil_twin.py
- Added
/templates
folder- Added Evil Twin to actions list
- Updated README.md
- PyPi Release
3.06
- Added
git_downloader.py
- Updated
beacon_spam
- Updated
evil_twin
27.06
- Removed
EULA
from script- Added
EULA
toREADME.md
- Added
pkt_crafter.py
- Modified
Freeway
script
- Android filters out fake beacon frames (works for Android 5, doesn’t on Android 11+, versions below Android 11 and above Android 5 were not tested.)
- EvilTwin needs a second adapter connected to the internet (not really an issue), to be able to reroute traffic
- The very first run of the EvilTwin may not succeed if dnsmasq wasn’t ever ran on the machine, run EvilTwin twice, or install and run dnsmasq before.
[!IMPORTANT]
Any malicious use of such features should be considered a crime,
always assert permission to perform the penetration testing.
The distribution of Freeway is regulated by the standard MIT license, users can feel free to use, share and contribute to the repository or report bugs.