Wifiphisher review
A free Linux tool for focused wireless phishing and access-point assessments.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Wifiphisher is a free, open-source Linux tool for red-team engagements and Wi-Fi security testing. It is designed for solo testers and small teams that need a specialized framework for wireless assessments. The tool creates rogue access points and uses Evil Twin, KARMA, and Known Beacons association techniques to place wireless clients in a man-in-the-middle position. It can then support custom web phishing scenarios, data sniffing, vulnerability scans of connected stations, and credential or activity logging.
Its standout capability is the breadth of wireless attack and verification functions in one focused tool. Wifiphisher supports deauthentication and disassociation attacks, WPA/WPA2 handshake capture for passphrase verification, and Python extension modules for customization. This makes it suitable for assessments that center on client association behavior, phishing exposure, and wireless credential handling. The project is distributed under the GNU GPL, and Kali Linux is officially supported, giving security practitioners a self-hosted option without a paid plan.
The trade-off is its narrow scope. Wifiphisher is a wireless assessment framework, not a general penetration-testing platform with broader verified workflows. Linux is the listed platform, and documentation is the stated support channel, so teams seeking cross-platform deployment or a wider support model should consider an alternative. Choose Wifiphisher when the engagement specifically requires rogue access points, wireless phishing scenarios, handshake capture, or related Wi-Fi techniques. Look elsewhere when the priority is comprehensive coverage across web, cloud, endpoint, or network penetration testing.
Wifiphisher pros and cons
- Where it wins
- Creates rogue access points with Evil Twin, KARMA, and Known Beacons techniques
- Supports custom phishing scenarios, credential logging, and activity capture
- Free, open-source, self-hosted deployment for Linux and Kali Linux
- Where it doesn't
- Focused on wireless assessments rather than broader penetration-testing workflows
- Linux-only platform support limits operating system flexibility
- Documentation is the listed support channel
Wifiphisher fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update