Wicker is a web interface that runs on top of the aircrack-ng suite and pyrit. It was created to simplify the process of wireless pen testing against WPA/WPA2 and WEP networks.
Wicker provides a simplistic web GUI that allows users to easily capture handshakes and then test them against supplied dictionaries. (dictionaries currently under development)
In order for Wicker's features to work properly, you'll have to change some settings on your system.
- Disable SELinux and allow PHP to execute commands such as system, exec, passthru, etc.
- Add Webserver user to visudo with execute permissions for aircrack-ng suite, kill, chmod & chown (to allow wicker to make directories writeable)
www-data ALL=NOPASSWD: airodump-ng, kill, aticonfig, rfkill, airmon-ng, chmod, aireplay-ng
- Comment out "Defaults requiretty" or add this line in visudo
Defaults:www-data !requiretty
- Make sure that the uploads, scans, and logs directories have permissions for the webserver user
Any actions and or activities related to Wicker and your usage of it is solely your responsibility. The misuse of Wicker can result in criminal charges brought against the persons in question. The authors of Wicker will not be held liable for your usage of Wicker.
All data that Wicker operates on either through itself or through the use of other tools must be data gathered with permission from the owner of said data.
Wicker is intended for educational and research purposes only.
We (The authors of Wicker) reserve the right to modify this disclaimer at any time.