2.5K ·GitHub
What is this?
WireTapper is a wireless OSINT tool that passively discovers, maps, and analyzes nearby radio-based devices — Wi-Fi, Bluetooth, CCTV cameras, vehicles, IoT gadgets, and cell towers — without actively intruding on anything.
WireTapper is a wireless OSINT tool that passively discovers, maps, and analyzes nearby radio-based devices — Wi-Fi, Bluetooth, CCTV cameras, vehicles, IoT gadgets, and cell towers — without actively intruding on anything.Is this a web dashboard I log into, or a program I install on my own device?It is a program you install on your own hardware, not a hosted service — there are dedicated guides for Linux, macOS, Windows, and Android, plus a PyPI package.
It is a program you install on your own hardware, not a hosted service — there are dedicated guides for Linux, macOS, Windows, and Android, plus a PyPI package.How do I get it running?Install it from PyPI or follow the guide for your OS (Linux, macOS, Windows, Android), then run through the platform-specific configuration before your first scan.
Install it from PyPI or follow the guide for your OS (Linux, macOS, Windows, Android), then run through the platform-specific configuration before your first scan.Does it need any API keys to actually find devices?For deeper discovery it pulls from external intelligence services: WiGLE for Wi-Fi and Bluetooth mapping, OpenCellID for cell towers, Shodan and Censys for exposed IoT and SCADA systems, plus wpa-sec — each needs its own API credential.
For deeper discovery it pulls from external intelligence services: WiGLE for Wi-Fi and Bluetooth mapping, OpenCellID for cell towers, Shodan and Censys for exposed IoT and SCADA systems, plus wpa-sec — each needs its own API credential.Is this actually hacking devices, or just listening?It only listens. The tool maps and correlates signals without active intrusion, and even leaked Wi-Fi credential lookups go through a privacy-protecting k-Anonymity query scheme rather than an attack.
It only listens. The tool maps and correlates signals without active intrusion, and even leaked Wi-Fi credential lookups go through a privacy-protecting k-Anonymity query scheme rather than an attack.Would an ordinary person get value from it, or is it built for security professionals?It targets investigators, researchers, and security analysts who want real-time visibility into the wireless landscape around them.
It targets investigators, researchers, and security analysts who want real-time visibility into the wireless landscape around them.Am I allowed to use this in commercial work?No — it is licensed under CC BY-NC 4.0, a non-commercial license, and the README explicitly prohibits unauthorized use. Treat it as a research and personal-use tool.
No — it is licensed under CC BY-NC 4.0, a non-commercial license, and the README explicitly prohibits unauthorized use. Treat it as a research and personal-use tool.What kinds of devices and signals can it actually pick up?Wi-Fi networks and access points, Bluetooth LE devices with RSSI-based distance estimates, Flock Safety and ALPR camera networks, cell towers, exposed cameras and IoT/SCADA systems found via Shodan and Censys, plus RF from vehicles, dashcams, wearables, and appliances.
Wi-Fi networks and access points, Bluetooth LE devices with RSSI-based distance estimates, Flock Safety and ALPR camera networks, cell towers, exposed cameras and IoT/SCADA systems found via Shodan and Censys, plus RF from vehicles, dashcams, wearables, and appliances.Do I need an SDR dongle like an RTL-SDR to use it?No — the API-backed modules (Shodan, Censys, WiGLE, OpenCellID) work without extra hardware. If you attach an RTL-SDR, HackRF One, or Airspy dongle, WireTapper detects it over USB and monitors its frequency ranges.
No — the API-backed modules (Shodan, Censys, WiGLE, OpenCellID) work without extra hardware. If you attach an RTL-SDR, HackRF One, or Airspy dongle, WireTapper detects it over USB and monitors its frequency ranges.Can I import my own survey or wardriving data into it?Yes. A drag-and-drop telemetry importer accepts CSV, KML, GeoJSON, SQLite (.db), and Excel files and smart-maps their columns to WireTapper's own fields.
Yes. A drag-and-drop telemetry importer accepts CSV, KML, GeoJSON, SQLite (.db), and Excel files and smart-maps their columns to WireTapper's own fields.What does the Bluetooth radar module do?The /btscan module performs live passive BLE detection, estimates how far a device is from RSSI path loss, and resolves rotating Resolvable Private Addresses using AES-128-ECB cryptographic functions.
The /btscan module performs live passive BLE detection, estimates how far a device is from RSSI path loss, and resolves rotating Resolvable Private Addresses using AES-128-ECB cryptographic functions.What are similar projects?ESP32Marauder, GhostTrack, urh, ESP32-Bit-Pirate, web-check, maigret, bbot, flowsint
ESP32Marauder, GhostTrack, urh, ESP32-Bit-Pirate, web-check, maigret, bbot, flowsintWhich topics is it in?sdr, osint-tool, radio, geolocation, scanner, wifi, pypi, bluetooth, reconnaissance, osint, iot, hardware
sdr, osint-tool, radio, geolocation, scanner, wifi, pypi, bluetooth, reconnaissance, osint, iot, hardware