wibrfake-brk 0.0.2

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 62f8bbbb413d7a3b636f9763f2ddb4771a71df0531f6a4911baf937a66b26a0e
+  data.tar.gz: 41dbcf7625734422ac37cd3e753b45a6fab2a37a070abf32fffa1ad17b2a3ecc
+SHA512:
+  metadata.gz: 847413668af20317588bb3ca8bf7a0b9808bf9bc32a2dd6c0627edb6499b77526769dcb914ecb952ba614587083efe37842f0a77d4c9af4dda0b7b0f87ec782a
+  data.tar.gz: bbb9ef2daa08bd95494a7d39b6618175b46cbba7a969220bddecc28e4b4d24812a899ef728e65366076517df960e058d4bae938dac48dee363c5f5883afa0a99

data/.dockerignore

@@ -0,0 +1,48 @@
+# See https://docs.docker.com/engine/reference/builder/#dockerignore-file for more about ignoring files.
+
+# Ignore git directory.
+/.git/
+/.gitignore
+
+# Ignore bundler config.
+/.bundle
+
+# Ignore all environment files (except templates).
+/.env*
+!/.env*.erb
+
+# Ignore all default key files.
+/config/master.key
+/config/credentials/*.key
+
+# Ignore all logfiles and tempfiles.
+/log/*
+/tmp/*
+!/log/.keep
+!/tmp/.keep
+
+# Ignore pidfiles, but keep the directory.
+/tmp/pids/*
+!/tmp/pids/.keep
+
+# Ignore storage (uploaded files in development and any SQLite databases).
+/storage/*
+!/storage/.keep
+/tmp/storage/*
+!/tmp/storage/.keep
+
+# Ignore assets.
+/node_modules/
+/app/assets/builds/*
+!/app/assets/builds/.keep
+/public/assets
+
+# Ignore CI service files.
+/.github
+
+# Ignore development files
+/.devcontainer
+
+# Ignore Docker-related files
+/.dockerignore
+/Dockerfile*

data/.gitattributes

@@ -0,0 +1,19 @@
+# See https://git-scm.com/docs/gitattributes for more about git attribute files.
+
+# Mark the database schema as having been generated.
+db/schema.rb linguist-generated
+
+# Mark any vendored files as having been vendored.
+vendor/* linguist-vendored
+config/credentials/*.yml.enc diff=rails_credentials
+config/credentials.yml.enc diff=rails_credentials
+# Clasificar archivos ERB como Ruby (vistas de Rails)
+*.html.erb linguist-language=Ruby
+*.erb linguist-language=Ruby
+
+# Excluir directorios con archivos estáticos (opcional)
+/public/* linguist-vendored
+/assets/* linguist-vendored
+
+# Si tienes otros archivos HTML no relevantes, márcalos como documentación
+*.html linguist-documentation

data/.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+- package-ecosystem: bundler
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10
+- package-ecosystem: github-actions
+  directory: "/"
+  schedule:
+    interval: daily
+  open-pull-requests-limit: 10

data/.github/workflows/ci.yml

@@ -0,0 +1,90 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [ main ]
+
+jobs:
+  scan_ruby:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Scan for common Rails security vulnerabilities using static analysis
+        run: bin/brakeman --no-pager
+
+  scan_js:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Scan for security vulnerabilities in JavaScript dependencies
+        run: bin/importmap audit
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Lint code for consistent style
+        run: bin/rubocop -f github
+
+  test:
+    runs-on: ubuntu-latest
+
+    # services:
+    #  redis:
+    #    image: redis
+    #    ports:
+    #      - 6379:6379
+    #    options: --health-cmd "redis-cli ping" --health-interval 10s --health-timeout 5s --health-retries 5
+    steps:
+      - name: Install packages
+        run: sudo apt-get update && sudo apt-get install --no-install-recommends -y google-chrome-stable curl libjemalloc2 libvips sqlite3
+
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: .ruby-version
+          bundler-cache: true
+
+      - name: Run tests
+        env:
+          RAILS_ENV: test
+          # REDIS_URL: redis://localhost:6379/0
+        run: bin/rails db:test:prepare test test:system
+
+      - name: Keep screenshots from failed system tests
+        uses: actions/upload-artifact@v4
+        if: failure()
+        with:
+          name: screenshots
+          path: ${{ github.workspace }}/tmp/screenshots
+          if-no-files-found: ignore

data/.rubocop.yml

@@ -0,0 +1,8 @@
+# Omakase Ruby styling for Rails
+inherit_gem: { rubocop-rails-omakase: rubocop.yml }
+
+# Overwrite or add rules to create your own house style
+#
+# # Use `[a, [b, c]]` not `[ a, [ b, c ] ]`
+# Layout/SpaceInsideArrayLiteralBrackets:
+#   Enabled: false

data/.ruby-version

@@ -0,0 +1 @@
+ruby-3.1.2

data/Dockerfile

@@ -0,0 +1,69 @@
+# syntax = docker/dockerfile:1
+
+# This Dockerfile is designed for production, not development. Use with Kamal or build'n'run by hand:
+# docker build -t my-app .
+# docker run -d -p 80:80 -p 443:443 --name my-app -e RAILS_MASTER_KEY=<value from config/master.key> my-app
+
+# Make sure RUBY_VERSION matches the Ruby version in .ruby-version
+ARG RUBY_VERSION=3.1.2
+FROM docker.io/library/ruby:$RUBY_VERSION-slim AS base
+
+# Rails app lives here
+WORKDIR /rails
+
+# Install base packages
+RUN apt-get update -qq && \
+    apt-get install --no-install-recommends -y curl libjemalloc2 libvips sqlite3 && \
+    rm -rf /var/lib/apt/lists /var/cache/apt/archives
+
+# Set production environment
+ENV RAILS_ENV="production" \
+    BUNDLE_DEPLOYMENT="1" \
+    BUNDLE_PATH="/usr/local/bundle" \
+    BUNDLE_WITHOUT="development"
+
+# Throw-away build stage to reduce size of final image
+FROM base AS build
+
+# Install packages needed to build gems
+RUN apt-get update -qq && \
+    apt-get install --no-install-recommends -y build-essential git pkg-config && \
+    rm -rf /var/lib/apt/lists /var/cache/apt/archives
+
+# Install application gems
+COPY Gemfile Gemfile.lock ./
+RUN bundle install && \
+    rm -rf ~/.bundle/ "${BUNDLE_PATH}"/ruby/*/cache "${BUNDLE_PATH}"/ruby/*/bundler/gems/*/.git && \
+    bundle exec bootsnap precompile --gemfile
+
+# Copy application code
+COPY . .
+
+# Precompile bootsnap code for faster boot times
+RUN bundle exec bootsnap precompile app/ lib/
+
+# Precompiling assets for production without requiring secret RAILS_MASTER_KEY
+RUN SECRET_KEY_BASE_DUMMY=1 ./bin/rails assets:precompile
+
+
+
+
+# Final stage for app image
+FROM base
+
+# Copy built artifacts: gems, application
+COPY --from=build "${BUNDLE_PATH}" "${BUNDLE_PATH}"
+COPY --from=build /rails /rails
+
+# Run and own only the runtime files as a non-root user for security
+RUN groupadd --system --gid 1000 rails && \
+    useradd rails --uid 1000 --gid 1000 --create-home --shell /bin/bash && \
+    chown -R rails:rails db log storage tmp
+USER 1000:1000
+
+# Entrypoint prepares the database.
+ENTRYPOINT ["/rails/bin/docker-entrypoint"]
+
+# Start the server by default, this can be overwritten at runtime
+EXPOSE 3000
+CMD ["./bin/rails", "server"]

data/Gemfile

@@ -0,0 +1,68 @@
+source "https://rubygems.org"
+
+gem "devise"
+gem "tty-reader"
+gem "tty-cursor"
+gem "pastel"
+gem "packetfu"
+gem "webrick"
+#gem "devise"
+gem "nio4r", ">= 0"
+# Bundle edge Rails instead: gem "rails", github: "rails/rails", branch: "main"
+gem "rails", "~> 7.2.2", ">= 7.2.2.1"
+# The original asset pipeline for Rails [https://github.com/rails/sprockets-rails]
+gem "sprockets-rails"
+# Use sqlite3 as the database for Active Record
+gem "sqlite3"
+# Use the Puma web server [https://github.com/puma/puma]
+gem "puma", ">= 5.0"
+# Use JavaScript with ESM import maps [https://github.com/rails/importmap-rails]
+gem "importmap-rails"
+# Hotwire's SPA-like page accelerator [https://turbo.hotwired.dev]
+gem "turbo-rails"
+# Hotwire's modest JavaScript framework [https://stimulus.hotwired.dev]
+gem "stimulus-rails"
+# Build JSON APIs with ease [https://github.com/rails/jbuilder]
+gem "jbuilder"
+# Use Redis adapter to run Action Cable in production
+# gem "redis", ">= 4.0.1"
+
+# Use Kredis to get higher-level data types in Redis [https://github.com/rails/kredis]
+# gem "kredis"
+
+# Use Active Model has_secure_password [https://guides.rubyonrails.org/active_model_basics.html#securepassword]
+# gem "bcrypt", "~> 3.1.7"
+
+# Windows does not include zoneinfo files, so bundle the tzinfo-data gem
+gem "tzinfo-data", platforms: %i[ mswin mswin64 mingw x64_mingw jruby ]
+
+# Reduces boot times through caching; required in config/boot.rb
+gem "bootsnap", require: false
+
+# Use Active Storage variants [https://guides.rubyonrails.org/active_storage_overview.html#transforming-images]
+# gem "image_processing", "~> 1.2"
+
+group :development, :test do
+  # See https://guides.rubyonrails.org/debugging_rails_applications.html#debugging-with-the-debug-gem
+  gem "debug", platforms: %i[ mri mswin mswin64 mingw x64_mingw ], require: "debug/prelude"
+
+  # Static analysis for security vulnerabilities [https://brakemanscanner.org/]
+  gem "brakeman", require: false
+
+  # Omakase Ruby styling [https://github.com/rails/rubocop-rails-omakase/]
+  gem "rubocop-rails-omakase", require: false
+end
+
+group :development do
+  # Use console on exceptions pages [https://github.com/rails/web-console]
+  gem "web-console"
+
+  # Highlight the fine-grained location where an error occurred [https://github.com/ruby/error_highlight]
+  gem "error_highlight", ">= 0.4.0", platforms: [ :ruby ]
+end
+
+group :test do
+  # Use system testing [https://guides.rubyonrails.org/testing.html#system-testing]
+  gem "capybara"
+  gem "selenium-webdriver"
+end

data/README.md

@@ -0,0 +1,188 @@
+# WibrFake 🌐🔍
+
+[![Version](https://img.shields.io/badge/version-0.0.2-blue.svg)](https://github.com/yourusername/wibrfake)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Maintenance](https://img.shields.io/badge/Maintained%3F-Yes-success.svg)](https://github.com/yourusername/wibrfake)
+[![PRs Welcome](https://img.shields.io/badge/PRs-Welcome-brightgreen.svg)](CONTRIBUTING.md)
+
+**Advanced Wi-Fi Security Assessment Framework**  
+*Professional tool for wireless network penetration testing and vulnerability analysis*
+
+---
+
+## 📖 Table of Contents
+- [Key Features](#-key-features)
+- [Ethical Considerations](#-ethical-considerations)
+- [Prerequisites](#-prerequisites)
+- [Installation](#-installation)
+- [Basic Usage](#-basic-usage)
+- [Attack Modules](#-attack-modules)
+- [Captive Portal Templates](#-captive-portal-templates)
+- [Contributing](#-contributing)
+- [License](#-license)
+
+---
+
+## ✨ Key Features
+
+### Core Capabilities
+- **Rogue Access Point Deployment**
+  - Custom SSID configuration
+  - Multiple channel support
+  - Traffic interception & analysis
+- **Advanced MAC Spoofing**
+  - OUI validation system
+  - Random/preset MAC generation
+  - MAC persistence management
+- **Session Orchestration**
+  - Parallel attack sessions
+  - State preservation
+  - Configuration versioning
+
+### Enterprise-Grade Modules
+| Module | Description |
+|--------|-------------|
+| **Evil Twin** | AP cloning with beacon flooding |
+| **Captive Portal** | Credential harvesting framework |
+| **WKdump Automation** | YAML-based attack configurations |
+
+---
+
+## ⚠ Ethical Considerations
+
+**This tool must only be used for:**
+- Authorized security audits
+- Educational purposes
+- Ethical penetration testing
+
+**By using WibrFake, you agree to:**
+- Comply with all applicable laws
+- Obtain proper authorization
+- Respect network privacy
+- Never engage in malicious activities
+
+---
+
+## 🔧 Prerequisites
+
+### Mandatory Requirements
+```bash
+sudo apt-get install -y \
+hostapd \
+libpcap-dev \
+ruby \
+ruby-full \
+```
+
+### Recommended Specifications
+- Linux
+- Wireless adapter supporting ap mode
+- Dual-band Wi-Fi card (2.4GHz/5GHz)
+- Minimum 2GB RAM
+
+---
+
+## 🚀 Installation
+
+### Standard Setup
+```bash
+git clone https://github.com/BreakerTWS/WibrFake.git
+cd WibrFake
+sudo bundle install
+sudo ruby bin/wibrfake --help
+```
+
+### RubyGem (Recommended)
+```bash
+sudo gem install wibrfake-brk
+sudo wibrfake --help
+```
+
+---
+# Usage
+This will launch a web server displaying the complete usage documentation for the wibrfake program:
+
+```bash
+    sudo wibrfake --usage
+```
+## 🕹 Basic Usage
+
+### Initialization
+```bash
+sudo wibrfake --mode cli --iface wlan0
+```
+
+### MAC Management
+```bash
+# Show current configuration
+mac status
+
+#OUIs list
+mac list
+
+mac list 10..20
+
+# Generate random MAC with valid OUI
+mac ramset b2:fa:91
+
+# Set specific MAC address
+mac set 00:11:22:33:44:55
+```
+
+---
+
+## ⚡ Attack Modules
+
+### Rogue AP Deployment
+```bash
+set ssid Wifi_Free
+apfake on
+```
+
+### Evil Twin Attack
+```bash
+Continue...
+```
+
+---
+
+## 🔐 Captive Portal Templates
+
+WibrFake supports enterprise-grade phishing templates:
+
+| Template | Description | Authentication Methods |
+|----------|-------------|-------------------------|
+| **Basic Login** | Generic credential form | Username/Password |
+| **Nauta Etecsa** | Cuban ISP portal clone | Account Nauta |
+| **Nauta Hogar** | Residential ISP variant | Account Nauta |
+| **Google** | Social media clone | OAuth/2FA |
+| **Facebook** | Social media clone | Email/Phone |
+| **Instagram** | Social media clone | Social credentials |
+
+---
+
+## 🤝 Contributing
+
+We welcome responsible disclosures and ethical contributions. Please review our:
+- [Contribution Guidelines](CONTRIBUTING.md)
+
+---
+
+## 📜 License
+
+Distributed under MIT License. See [LICENSE](LICENSE) for full details.
+
+---
+
+## 🔒 Security Recommendations
+
+For optimal security during audits:
+1. Use dedicated hardware
+2. Enable VPN tunneling
+3. Regularly rotate MAC addresses
+4. Limit attack surface
+5. Destroy captured data post-audit
+
+> **Warning**  
+> Unauthorized use of this software violates international laws.  
+> Developers assume no liability for misuse.

data/Rakefile

@@ -0,0 +1,6 @@
+# Add your own tasks in files placed in lib/tasks ending in .rake,
+# for example lib/tasks/capistrano.rake, and they will automatically be available to Rake.
+
+require_relative "config/application"
+
+Rails.application.load_tasks

data/app/assets/config/manifest.js

@@ -0,0 +1,5 @@
+//= link_tree ../images
+//= link_tree ../stylesheets .css
+//= link_tree ../../javascript .js
+//= link_tree ../../../vendor/javascript .js
+

data/app/assets/images/facebook/facebook-logo.svg

@@ -0,0 +1,3 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1090" height="360" fill="none" viewBox="0 0 1090 360">
+  <path fill="#0866FF" d="M881.583 257.897h29.48v-47.696l41.137 47.696h36.072l-47.89-54.969 40.909-47.663h-32.825l-37.403 43.93v-96.982l-29.48 3.864v151.82Zm-67.988-105.261c-32.728 0-55.455 22.013-55.455 53.929s22.727 53.929 55.455 53.929c32.727 0 55.455-22.013 55.455-53.929s-22.728-53.929-55.455-53.929Zm0 82.728c-15.163 0-25.552-11.721-25.552-28.799s10.389-28.799 25.552-28.799c15.162 0 25.552 11.721 25.552 28.799s-10.39 28.799-25.552 28.799Zm-119.807-82.728c-32.727 0-55.455 22.013-55.455 53.929s22.728 53.929 55.455 53.929c32.728 0 55.455-22.013 55.455-53.929s-22.727-53.929-55.455-53.929Zm0 82.728c-15.162 0-25.552-11.721-25.552-28.799s10.39-28.799 25.552-28.799c15.163 0 25.552 11.721 25.552 28.799s-10.389 28.799-25.552 28.799Zm-112.826-82.728c-13.636 0-24.935 5.357-32.013 15.162v-65.585l-29.513 3.831v151.82h26.169l.519-15.844c6.981 11.818 19.481 18.474 34.838 18.474 27.988 0 48.475-22.728 48.475-53.929 0-31.202-20.39-53.929-48.475-53.929Zm-6.98 82.728c-15.163 0-25.552-11.721-25.552-28.799s10.389-28.799 25.552-28.799c15.162 0 25.552 11.721 25.552 28.799s-10.39 28.799-25.552 28.799Zm-113.638 1.331c-15.649 0-26.883-7.273-30.714-19.805h72.63c.715-3.831 1.202-8.377 1.202-11.429 0-33.02-18.475-52.825-49.514-52.825-31.331 0-53.02 22.013-53.02 53.929 0 32.338 22.728 53.929 56.462 53.929 17.467 0 34.448-5.844 45.065-15.552l-10.617-18.701c-10.292 7.11-20.39 10.454-31.494 10.454Zm-6.591-61.137c13.637 0 22.338 8.279 22.338 21.104v.098h-47.078c2.825-13.604 11.623-21.202 24.74-21.202Zm-98.994 84.968c15.26 0 30.195-5.844 40.714-15.974l-11.526-19.383c-8.182 6.364-17.467 9.805-26.266 9.805-16.364 0-27.273-11.429-27.273-28.377s10.909-28.377 27.273-28.377c8.084 0 16.883 2.922 24.026 8.085l11.721-19.806c-9.481-8.571-24.156-13.831-38.702-13.831-32.013 0-54.643 22.338-54.643 53.929.032 31.494 22.662 53.929 54.676 53.929Zm-93.735-105.261-.519 15.975c-6.981-11.916-19.481-18.572-34.838-18.572-28.085 0-48.475 22.728-48.475 53.929 0 31.202 20.52 53.929 48.475 53.929 15.357 0 27.889-6.656 34.838-18.474l.519 15.844h26.169V155.265h-26.169Zm-28.377 80.099c-15.162 0-25.552-11.721-25.552-28.799s10.39-28.799 25.552-28.799c15.163 0 25.552 11.721 25.552 28.799s-10.422 28.799-25.552 28.799Zm-57.663-79.906h-26.526v-8.767c0-13.117 5.13-18.149 18.442-18.149 4.123 0 7.467.097 9.383.292v-22.5c-3.637-1.007-12.5-2.013-17.63-2.013-27.111 0-39.611 12.792-39.611 40.422v10.682h-16.753v24.806h16.753v77.631h29.448v-77.599h21.949l4.545-24.805Z"/>
+</svg>