Fluxion is a security auditing tool that automates WPA/WPA2 key retrieval through social engineering attacks against wireless networks.
The tool addresses the challenge of testing wireless network security by implementing a phishing-based attack that combines multiple techniques. It scans for target networks, captures WPA handshakes, and then spawns a rogue access point that mimics the legitimate network. Simultaneously, it runs a DNS server and captive portal web server to redirect users and prompt them for their WPA/WPA2 credentials. A deauthentication jammer forces clients away from the original access point toward the fake one. Each credential submission is validated against the captured handshake, and the attack terminates automatically once the correct key is entered.
Fluxion suits penetration testers and security researchers who need to audit wireless networks on Linux systems, particularly those running Kali Linux. The tool is designed for manual attack setup, though it includes experimental auto-mode to handle some configuration parameters automatically. An external WiFi card is recommended for reliable operation. The project is a remake of linset with the stated goal of reducing bugs and adding functionality compared to its predecessor.
The project maintains rapid responsiveness to issues and pull requests, typically addressing them within hours. Development activity centers on enhancements and bug fixes marked as high priority, indicating active refinement of core functionality.
