Wifiphisher

At a glance

• Editor score
  6.0 / 10
• Pricing
  Free plan
• Best for
  Free specialized Wi-Fi phishing assessments
• Free plan
  Yes
• Paid from
  Free
• Deployment
  On-prem
• Facts checked
  22 Sep 2026

• Where it wins

  • Creates rogue access points with Evil Twin, KARMA, and Known Beacons techniques
  • Supports custom phishing scenarios, credential logging, and activity capture
  • Free, open-source, self-hosted deployment for Linux and Kali Linux

• Where it doesn't

  • Focused on wireless assessments rather than broader penetration-testing workflows
  • Linux-only platform support limits operating system flexibility
  • Documentation is the listed support channel

Our verdict on Wifiphisher

Wifiphisher is a free, open-source Linux tool for red-team engagements and Wi-Fi security testing. It is designed for solo testers and small teams that need a specialized framework for wireless assessments. The tool creates rogue access points and uses Evil Twin, KARMA, and Known Beacons association techniques to place wireless clients in a man-in-the-middle position. It can then support custom web phishing scenarios, data sniffing, vulnerability scans of connected stations, and credential or activity logging.

Its standout capability is the breadth of wireless attack and verification functions in one focused tool. Wifiphisher supports deauthentication and disassociation attacks, WPA/WPA2 handshake capture for passphrase verification, and Python extension modules for customization. This makes it suitable for assessments that center on client association behavior, phishing exposure, and wireless credential handling. The project is distributed under the GNU GPL, and Kali Linux is officially supported, giving security practitioners a self-hosted option without a paid plan.

The trade-off is its narrow scope. Wifiphisher is a wireless assessment framework, not a general penetration-testing platform with broader verified workflows. Linux is the listed platform, and documentation is the stated support channel, so teams seeking cross-platform deployment or a wider support model should consider an alternative. Choose Wifiphisher when the engagement specifically requires rogue access points, wireless phishing scenarios, handshake capture, or related Wi-Fi techniques. Look elsewhere when the priority is comprehensive coverage across web, cloud, endpoint, or network penetration testing.

Your product? Our editors can test Wifiphisher in depth and publish a review, labelled as paid · from $149/mo →

Wifiphisher pricing

Wifiphisher fact sheet

Alternatives to Wifiphisher

• PPentesterraBroad automated penetration testing with a free plan and €23 monthly entry tier.9.3
• PentiBroad AI-led testing with human validation, evidence, retesting, and compliance reporting.9.1
• CICore ImpactA broad on-premise toolkit for repeatable infrastructure, web, client-side, wireless and mobile testing.8.9

See all Wifiphisher alternatives →

Featured on iTechGuides

Wifiphisher is listed in our Penetration Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/wifiphisher/"><img src="https://www.itechguides.com/best/badge/wifiphisher.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update