Wireless AP audit · Python
uaf
PCI-DSS asks for a wireless assessment, and the honest version of that question is: which of these access points are ours, and which of them are open?
- Python
- Linux
Scanning tools tend to stop at a list of SSIDs. An audit report needs more than that: whether the encryption is WEP or WPA3, whether the SSID is hidden, who made the radio, and — for the open ones — what is actually behind them.
Passive. Real-time detection across 2.4, 5 and 6 GHz. Every AP is classified by security (WEP, WPA, WPA2, WPA3, OPN) and by standard (802.11 a/b/g/n/ac/ax), with channel width, hidden-SSID recovery and MAC vendor lookup. Open networks are highlighted, because those are the ones the report is about.
Active. Pick a suspicious open AP from the list and uaf connects to it, then maps what it finds: DHCP details, an ARP sweep for other clients, and a port scan of the gateway. Results come back in an overlay rather than a new screen.
Export. CSV and JSON, active-scan results included, so the findings go straight into the audit document instead of being retyped.
Needs a Linux box with iw and ip, root, and an adapter that does monitor
mode.