An (Updated) Hacker’s Toolkit


We thought that this would be a good time to update this popular article, as new tools to hack private communications in WiFi hotspots are always evolving. This article discusses some of the most well-known WiFi hacking tools.


Unfortunately, novice hackers don’t have to look very hard to find all they need to know regarding how to hack. For example:

  • Kali Linux is one of the best known hacking tool collections, and their website provides many how-to hacking links.
  • YouTube now has more than 300,000 videos on WiFi hacking, some with millions and millions of views. One of the first listed is called “how to hack any WiFi hotspot in about 30 seconds.”
  • There are many other hacking websites out there, but since many of them are dubious and may have malware installed on them, we do not want to link to them as they may put you at risk.


The following is a list of the top 10 tools preferred by both ethical and black hat hackers in 2015:

  • Angry IP Scanner: Angry IP Scanner is a free network scanner that is very easy to use. It scans IP addresses and ports to find open ports.
  • Burp Suite:  A penetration testing tool that has several features that can map out the various pages and structure of a website by looking at cookies, and then initiates attacks on various web applications.
  • Cain & Able: This is a multi-purpose tool that can intercept network traffic, using information contained in those packets to crack encrypted passwords using dictionary, brute-force and cryptanalysis attack methods, record VoIP conversations, recover wireless network keys, and analyze routing protocols. Its main purpose is the simplified recovery of passwords and credentials. This software has been downloaded over 400,000 times.
  • Ettercap: This widely used hacking tool works by placing a user’s network interface into promiscuous mode and by ARP poisoning, which is a process in which the hacker gives the wrong MAC or IP address to the network in order to carry out a Man-in-the-Middle attack.
  • John the Ripper: This hacking tool is popular for dictionary attack. It takes text string samples from a large dictionary, encrypts it in the same way as the password being crack, and then compares the output to the encrypted string. This is an example of a brute force attack.
  • Metasploit: This hacking tool can be used for exploiting a network’s backdoor. While it’s not free, it is a huge popular penetration testing tool used by both ethical hackers, as well as unethical ones. It helps provide information about known security vulnerabilities for a network.
  • NMap: Also known as Network Mapper (or nmap for short), this free hacking tool is used by network administrators for security and auditing purposes. It uses IP packets to determine what hosts are available on the networks, what services they offer, what types of protocols are being used, what operating systems are being used on the network, and what type of packet filters and firewalls are being used.
  • Nessus Remote Security Scanner: This hacking tool can be used with client-server frameworks, and is the most popular vulnerability scanner worldwide.
  • THC Hydra: This is another password hacking tool that uses a dictionary or brute force attack to try various password and login combinations against a log in page.
  • Wapiti: This is a penetration testing tool that is able to scan hundreds of possible vulnerabilities. It can audit the security of web application by performing black box scans, which scans the HTML pages of the application it is trying to attack in order to inject data.

For hackers that prefer a turn-key package, there are also hardware wireless hacking tools available. We’ve highlighted one called WiFi Pineapple. It’s a simple, small, portable device that can be carried into any hotspot and used to attract any laptop trying to find a WiFi  access point. The Pineapple uses a technique called an Evil Twin attack. Hackers have used tools like KARMA to do the same thing for years, but with Pineapple, now you can buy a piece of hardware for only $100 that allows you to become a hacker without downloading or installing any software.

Here’s what their website says: “Of course all of the Internet traffic flowing through the pineapple such as e-mail, instant messages and browser sessions are easily viewed or even modified by the pineapple holder.”

Hacking Countermeasures

Fortunately, there are resources that you can use to help combat these threats. Below are two excellent books:

  • Hacking Exposed: Network Security Secrets & Solutions, by Joel Scambray. This book talks about security from an offensive angle and includes a catalog of the weapons hackers use. Readers see what programs are out there, quickly understand what the programs can do, and benefit from detailed explanations of concepts that most system administrators do not understand in detail. Hacking Exposed wastes no time in explaining how to implement the countermeasures that will render known attacks ineffective. Taking on the major network operating systems and network devices one at a time, the authors tell you exactly what UNIX configuration files to alter, what Windows NT Registry keys to change, and what settings to make in NetWare.
  • Wi-Foo: The Secrets of Wireless Hacking, by A. Vladimirov, K. Gavrilenko, and A. Mikhailovsky. This book is the first practical and realistic book about 802.11 network penetration testing and hardening, based on a daily experience of breaking into and securing wireless LANs. Rather than collecting random wireless security news, tools, and methodologies, Wi-Foo presents a systematic approach to wireless security threats and countermeasures starting from the rational wireless hardware selection for security auditing and describes how to choose the optimal encryption ciphers for the particular network you are trying to protect.


The following list includes common WiFi terms discussed in this white paper. For additional terms and definitions, please see our online glossary.

Brute Force Attack

Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords through exhaustive effort (using brute force) rather than employing intellectual strategies. Just as a criminal might break into, or “crack” a safe by trying many possible combinations, a brute force cracking application proceeds through all possible combinations of legal characters in sequence. Brute force is considered to be an infallible, although time-consuming, approach.


Encryption is the translation of data into a secret code. To read encrypted data, you must have access to the secret key or password that was used to translate the data into cipher text. That same key or password enables you to decrypt cipher text back into the original plain text. Encryption is the most effective way to achieve data security, but depends on using keys known only by the sender and intended recipient. If a hacker can guess (crack) the key, data security is compromised.

Evil Twin

This is a rogue WiFi access point that appears to be a legitimate one, but actually has been set up by a hacker to intercept wireless communications. An Evil Twin is the wireless version of the “phishing” scam: an attacker fools wireless users into connecting their laptop or mobile phone by posing as a legitimate access point (such as a hotspot provider). When a victim connects to the Evil Twin, the hacker can launch man-in-the-middle attacks, listening in on all Internet traffic, or just ask for credit card information in the standard pay-for-access deal. Tools for setting up an evil twin are easily available (e.g., Karma and Hotspotter). One recent study found that over 56% of laptops were broadcasting the name of their trusted WiFi networks, and that 34% of them were willing to connect to highly insecure WiFi networks – which could turn out to be Evil Twins.


Hypertext Transfer Protocol Secure (HTTPS) combines the Hypertext Transfer Protocol used by browsers and websites with the SSL/TLS protocol used to provide encrypted communication and web server authentication. HTTPS connections are often used to protect payment transactions on the Internet so that anyone that might intercept those packets cannot decipher sensitive information contained therein.

Man-In-the-Middle Attacks

A man-in-the-middle attack is a form of active eavesdropping in which the attacker makes independent connections a communication source and destination and relays messages between them, making those victims believe that they are talking directly to each other, when in fact the entire conversation is being controlled by the attacker. The attacker must be able to intercept all messages exchanged between the two victims. For example, an attacker within reception range of an unencrypted WiFi access point can insert himself as a man-in-the-middle by redirecting all packets through an Evil Twin. Or an attacker can create a phishing website that poses as an online bank or merchant, letting victims sign into the phishing server over a SSL connection. The attacker can then log onto the real server using victim-supplied information, capturing all messages exchanged between the user and real server – for example, to steal credit card numbers.


Sidejacking is a web attack method where a hacker uses packet sniffing to steal a session cookie from a website you just visited. These cookies are generally sent back to browsers unencrypted, even if the original website log-in was protected via HTTPS.  Anyone listening can steal these cookies and then use them access your authenticated web session. This recently made news because a programmer released a Firefox plug-in called Firesheep that makes it easy for an intruder sitting near you on an open network (like a public wifi hotspot) to sidejack many popular website sessions. For example, a sidejacker using Firesheep could take over your Facebook session, thereby gaining access to all of your sensitive data, and even send viral messages and wall posts to all of your friends.


Packet sniffers allow eavesdroppers to passively intercept data sent between your laptop or smartphone and other systems, such as web servers on the Internet. This is the easiest and most basic kind of wireless attack. Any email, web search or file you transfer between computers or open from network locations on an unsecured wireless network can be captured by a nearby hacker using a sniffer. Sniffing tools are readily available for free on the web and there are at least 184 videos on YouTube to show budding hackers how to use them. The only way to protect yourself against WiFi sniffing in most public WiFi hotspots is to use a VPN to encrypt everything sent over the air.


A Netscape-defined protocol for securing data communications – particularly web transactions – sent across computer networks. The Secure Sockets Layer (SSL) protocol establishes a secure session by electronically authenticating the server end of any connection, and then using encryption to protect all subsequent transmissions. The Transport Layer Security (TLS) protocol refers to the Internet standard replacement for SSL. Websites that are addressed by URLs that begin with https instead of http use SSL or TLS.


WEP and WPA are security protocols used to protect wireless networks. Wired Equivalent Privacy (WEP) is a deprecated security protocol for IEEE 802.11 wireless networks. Because all wireless transmissions are susceptible to eavesdropping, WEP was introduced as part of the original 802.11 standard in 1997. It was intended to provide confidentiality comparable to that of a traditional wired network. Since 2001, several serious weaknesses in the protocol have been identified so that today a WEP connection can be cracked within minutes. In response to these vulnerabilities, in 2003 the Wi-Fi Alliance announced that WEP had been superseded by Wi-Fi Protected Access (WPA). Wi-Fi Protected Access versions 1 and 2 (WPA and WPA2) refer to certification programs that test WiFi product support for newer IEEE 802.11i standard security protocols that encrypt data sent over the air, from WiFi user to WiFi router.

Get Private Wifi   Protect your personal information.
Get DataCompress   Cut your mobile data usage.

Jared Howe

Jared Howe is PRIVATE WiFi’s Senior Manager, Product Marketing Communications. Working in high tech for over 15 years, Jared currently lives in Seattle with his wife, daughter, and their two cats.

90 Responses

  1. Erika Patterson says:

    I had a lot of collections on my credit, a repossession and an eviction. I needed to buy a house in about 2-3 months so I could leave my ex husband’s home. I needed to get my credit cleared up ASAP and FixMyCredit came highly recommended in a post I read on reddit so I contacted him ( Fix My Credit @ W r i t e m e . Com). Within a few days, he removed eviction, cleared up all collections and raised my score from 560 to 789. I got a house after 2 weeks and left my ex husband’s home. You can reach out to him on the above email for your credit repair help

    • Camila Dunn says:

      Anonymous credit repairer is easy to work with and he provides fast results. I am so happy my debt has been removed from my credit. My credit score is now above 700 across all credit bureaus. Get in touch with him at A. n. o. n. y. m. o. u. s. C. r. e. d. i. t. R. e. p. a. i. r. e. r. A. t. G. m. a. i. l and let him handle everything.

      • Lillian Blue says:

        My credit was at an all-time low and I did not know what I was going to do.I had nowhere to turn as I tried to reconstruct this area of my life until I began to search the net for solutions. I spoke with anonymous credit repairer and was immediately assured that this was the safest and legitimate approach to resolving my credit issues. He successfully raised my credit score and he is now taking away any negatives my boyfriend may have on his credit too. What I really like is the daily update and the activity being reported throughout the process. He is THE BEST! LOVE HIM.

  2. Antonio Nava says:

    well i just have to give my testimony on here about this hacker that helped me fix my credit score within just 2 weeks .. my credit score was 430 and i was in a serious dept , i thought of what to do until i came across this great hacker on here .. he helped erase all negatives in 3 bureau.. you can as well contact him at :Nightdoomhack[at]cyber-wizard[dot]com

  3. claire says:

    I am open to share my experience in Bitcoin recovery and to also enlighten everyone on how I was able to recover my stolen bitcoins from scammers fronting as an ICO , feel free to reach out to the recovery company that helped me Caltech Recovery at caltechrecovery at gmail dot com

  4. L Brice says:

    On my credit I have the issue of payments irregularities, a credit score as low as 486, background checks, bad credit reports so I can’t condone the hardness of paying up my credit, as a matter of fact I just loosed my job recently, to cater for the kids is another burden on me since I’m a single father of 3, so I called on LIAM_CREDITBOSS on IG when I saw someone recommend him for credit help on a credit blog, the recommendation I saw are all encouraging, I got in touch with him on phone and we discussed about the credit fix and the way forward, he promised to help and will be honest with me, I held his words and gave him go ahead, within three months my credit has been perfectly fixed, no more evictions, bad reports, repos, everything was done appropriately without any cause for alarm, my credit score was also boosted to a very much encouraging limit, I can’t express to you guys how much I’m happy now, I’m now the proud owner of a well furnished home in DALLAS. This is a year of wonders and miracle in my life..

  5. Greg says:

    Your credit score doesn’t matter nearly as much as the actual information in your credit report. When I was applying for loans for my most recent investment property (my third property including my home), my score was in the mid-500’s. I had late payments, the lenders actually looked at my report and refused me a loan then suggest I worked on my credit which I did by asking for help because I had no idea where to start from. I contacted (Creditstreamers@instructor .net) by several recommendations from friends and was transferred to an agent who handled my case with proper attention. It took a few months but he got my score to 720 and It keeps increasing. They are simply the best.

  6. Robert Wilson says:

    I went through hell trying to get my credit to excellent as I wanted to buy a truck for my new business but my poor credit denied me from getting a loan.
    I kept getting ripped off by credit repair companies and some amateur hackers who only collected funds without doing anything . I finally came across (PRIVATEHACKER247 at GMAIL dot COM) and he increased my credit score to 790 and removed all the negatives I had on my credit report. He has also
    Helped improve my wives credit and few of my friends. Contact him today if you need your credit fixed.

  7. phillp speakman says:

    I have spoken here severally about these comments about credit repair hacker, I doubt most of them can get any hack done. Your best bet at getting your credit or any other thing fixed is by contacting this email (Alienman. hacker GMAILCOM)I haven’t come across anyone more professional and truthful. Been using his Service for while and I will recommend him over those low script hacker, charges a one time fee and gets the job done with no excuse or whatsoever. Thank me later

  8. claire says:

    instagram that it was a good investment choice,i decided to start with $5,000.I got paid my $10,000 the following week so i decided to invest more and have my family memebers invest, now the money is $200,000 but i couldnt withdraw it,i also tried reaching out to the man that introduced me to it,it was like he vanished into the thin air.It was while i was going through google i came across this recovery company Caltech Recovery,this company helped me recover my funds in less than 72hours including the profits was refunded. contact them caltechrecovery AT gmail com

  9. Maria Kristensen says:

    Are you in need to get your credit score fixed and all negatives cleared ? then you need to get in touch with the best Hackers to get the job done within a short period of time , i was once having a rough time with my credit then luckily for me i came across this great hackers that fixed my credit in just 2 weeks .. you can as well contact them : webghost[at]hackermail[dot]com.

  10. Robert Maylor says:

    If you need your credit fixed urgently with 1 month I suggest you contact aceteamcredit AT gmail dot COM, He raised my score up from 540 to an excellent 800 on all 3 bureaus in 1 month. I was at first skeptical when I contacted him but I had no other place to go for help so I gave him a try and to my upmost surprise he came through. He permanently removed all the negative items I had on my credit and increased my credit score to excellent on all 3 bureaus.

  11. Julia Hadden says:

    I joined like about 3 credit repair groups and I most say that some of credit companies are robbing people blind. My credit has been in good standing since I met Alienman, he is the one who raised my score up by 267 points and deletes any negative item that would affect my credit. To reach him contact Alienman [dot] hacker [at] gmail [dot] com and watch your credit improve drastically

  12. Timo Reyes says:

    If you are going to contact a hacker to increase your credit score, the best you can do for yourself is to contact someone with a credible history by carrying out a proper research. I got scammed twice trying to fix up my credit using a hacker but soon discovered I was working with bunch of low script amateurs. I would recommend Demoninvader.hacker ‘at’ gmail ‘dot’ com, he is the oldest hacker on the deep web and would help fix your credit for half the price most of these low script hackers will charge.

  13. Lori Platt says:

    Credit repair companies DO NOT do anything to credit score rather than to take your info and dispute your hard inquires online. I got my credit score repaired last month using HACK KING ZEUS service.You have to be careful as never to pay these programmers in full and I can’t stress this enough as we need to protect ourselves regardless. Zeus is a good guy and you can find him on (754) 999 2990

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.