wifit3
A standalone USB Wi-Fi auditor for Linux, Windows, and macOS.
At least one of the supported USB adapters is required.
Why?
- Cross-Platform: Runs identically on Linux, macOS, and Windows.
- Wireless Driver Heaven: Built-in wireless stack avoids kernel driver versioning hell and Windows' NDIS.
- Zero Runtime Dependencies: No
aircrack-ng or reaver, just pure Python with PyUSB & Textual libraries.
Features
Reconnaissance & Analysis
- Multi-Card Aggregation: Capture packets across multiple adapters simultaneously; pick a dedicated card to inject.
- Real-time Scanner: 2.4GHz & 5GHz channel-hopping (split for multi-cards); tracks signal strength, encryption suites, WPA3/SAE transition modes.
- AP & Client Identification: Fingerprints device vendors and categories; extracts router make and model from WPS beacons.
- VAP Decloaking: Identifies hidden networks by correlating their BSSIDs with known visible siblings.
- Packet Dashboard: Visualizes real-time beacon, data, injection, and deauthentication packet rates.
Attacks & Captures
- WPA/WPA2 Handshakes: Passive sniffing and targeted deauthentication; validates crackable pairs; exports
.pcap and .hc22000 files.
- PMKID Harvesting: Active association harvest and passive sniffing for WPA/WPA2 PMKID key material (
.hc22000).
- EvilTwin WPA3 Downgrade: Clones the AP and evicts clients (via CSA, BTM, and de-auths) to capture handshakes. Works on single and multiple cards.
- WPS Recovery Suite:
- PixieDust (2 Modes): Instant offline PIN recovery exploiting Null Secret and Static Secret PRNG weaknesses.
- PushButton (PBC): Detects physical WPS button presses and immediately extracts the plaintext WPA PSK.
- PIN Brute-Force: Resumable WPS PIN cracking with known-PIN database and AP lock monitoring.
- WEP Suite: Pure Python ARP replay, ChopChop, Fake Authentication, and PTW key recovery.
Screenshots
| Scanner |
Focus (single target) |
 |
 |
Supported Hardware
Important: At least one supported USB wireless adapter is required.
| Chipset |
Bands |
Cards (Make + Model) |
| Atheros AR9271 |
2.4 GHz |
ALFA AWUS036NHA, TP-Link TL-WN722N V1 |
| MediaTek MT7610U |
2.4 / 5 GHz |
ALFA AWUS036ACHM, Panda PAU0B |
| MediaTek MT7612U |
2.4 / 5 GHz |
ALFA AWUS036ACM |
| MediaTek MT7921AU |
2.4 / 5 GHz |
ALFA AWUS036AXML, Panda PAU0F |
| MediaTek MT7925U |
2.4 / 5 GHz |
Netgear A9000 |
| Realtek RTL8812AU |
2.4 / 5 GHz |
ALFA AWUS036ACH |
| Realtek RTL8814AU |
2.4 / 5 GHz |
ALFA AWUS1900 |
| Realtek RTL8821AU |
2.4 / 5 GHz |
ALFA AWUS036ACS, TP-Link Archer T2U Plus/Nano |
| Realtek RTL8821CU |
2.4 / 5 GHz |
Auscoumer 600 Mbps |
| Realtek RTL8922AU |
2.4 / 5 GHz |
ASUS USB-BE93 |
| Realtek RTL8822BU |
2.4 / 5 GHz |
TP-Link T3U Plus, Archer T4U v3 / T4U+ |
| Realtek RTL8822CU |
2.4 / 5 GHz |
D-Link AC13U |
| Realtek RTL8187L |
2.4 GHz |
ALFA AWUS036H |
| Realtek RTL8188EUS |
2.4 GHz |
TP-Link TL-WN722N v2/v3 |
| Ralink RT2570 |
2.4 GHz |
Buffalo Nintendo Wi-Fi USB Controller |
| Ralink RT3070 |
2.4 GHz |
ALFA AWUS036NH |
| Ralink RT5370 |
2.4 GHz |
LOTEKOO 150 Mbps |
| Ralink RT5372 |
2.4 GHz |
Panda PAU05/PAU06 |
| Ralink RT5572 |
2.4 / 5 GHz |
Panda PAU09 N600 |
Breakdown of each device's capabilities and limitations: Supported Hardware Doc.
Installation & Running
Option 1: Download Prebuilt Binaries (Recommended)
Download the latest standalone executable from Releases:
Option 2: Run from Source
wifit3 uses Astral's uv. sync sets up dependencies:
uv sync
uv run wifit3
Option 3: Build your own binary
uv run pyinstaller wifit3.spec --noconfirm --clean
Binary executable is written to dist/ subdirectory.
One-Time Driver Setup
wifit3 automatically handles hardware configuration within the app, after clicking the START button:
- Linux: Prompts once via
pkexec/sudo to write udev permissions and blocklists in /etc/modprobe.d/.
- macOS: No installation required; plug in the device and select Allow in the authorization dialog.
- Windows: Prompts once via UAC to install WinUSB for the device.
Uninstalling
Return the previously-installed device to your operating system's Wi-Fi stack:
- Select the card on the wifit3 splash screen.
- Click the
Uninstall button and confirm.
- Accept the elevation prompt (UAC on Windows or
pkexec on Linux).
- Unplug and re-plug the adapter.
On Linux, this deletes wifit3's udev and modprobe rules.
On Windows, this uninstalls the WinUSB binding, and triggers a PnP device rescan (old driver reattaches).
Thank you, Linux!
wifit3 only exists because of the great people who reverse-engineered and maintained these Linux wireless
drivers. It's usually a thankless job.
Special thanks to:
- Christian "kimo" B. (@kimocoder) who maintains wifite2 and
aircrack-ng's RTL8188EUS DKMS driver.
- Neur0sp1cy: Close friend and the master to my Linux & wireless-hacking apprenticeship.
- Nick Morrow (@morrownr), legend, maintains the out-of-tree Realtek USB
DKMS drivers.
The full list is in CREDITS.md.
How it Works: Mini-Drivers
wifit3 bypasses the operating system's native Wi-Fi stack entirely. It ships with lightweight Python ports of Linux kernel drivers (src/wifit3/chips/*) that directly control wireless devices over USB bulk and control transfers.
Because register-level frame injection and monitor mode are performed entirely in user space, Windows NDIS restrictions and Linux kernel driver locking do not apply.
For architecture details, driver porting methodology, and USB trace replay tooling, see the Porting Documentation.
License & Disclaimer
Code: Licensed under GNU General Public License v2.0 (matching upstream Linux drivers).
Firmware: Vendor firmware blobs loaded onto adapters are redistributed verbatim under their respective manufacturers' licenses (details in FIRMWARE.md).
⚠️ Notice & Disclaimer: For use only on networks and equipment you own or are explicitly authorized to audit. wifit3 operates directly on USB hardware registers without kernel guardrails; use at your own risk.
wifit3 是一个独立的 Wi-Fi 安全审计工具，用一个受支持的 USB Wi-Fi 网卡扫描网络、捕获 WPA/WPA2 握手并利用 WPS/WEP 的弱点，不依赖 aircrack-ng 或操作系统内核驱动。