dwpa VS bouncer

From what I’ve seen, typically the contributor count on wpa-sec.stanev.org has hovered around 10-15; currently it sits at 6928 and climbing (but producing only ~2x the 24hr performance of the nominal 10-15 contributors). Does someone have a cluster / network of low-power devices they’ve begun contributing? Did the service recently get published somewhere to attract new contributors? Is there a bug in the contributor-count code?

"WPA_SEC: Internet connectivity detected. Uploading new handshakes to wpa-sec.stanev.org"

It has a feature that will upon capture auto upload the hashes to places like onlinehashcrack or https://wpa-sec.stanev.org/ to crack.

main.plugins.wpa-sec.enabled = false main.plugins.wpa-sec.api_key = "" main.plugins.wpa-sec.api_url = "https://wpa-sec.stanev.org" main.plugins.wpa-sec.download_results = false main.plugins.wpa-sec.whitelist = []

I would like to try and create a plugin that checks wpa-sec.stanev.org (your nets) and compare a list of "already cracked wifi networks" and then show you the most recent cracked wifi network on your pwnagotchi.

https://wpa-sec.stanev.org/?

The wpa-sec plugin is also already there; you just need to enable it in your config.toml. There's a key you need to grab from the https://wpa-sec.stanev.org website by signing up, too. Anytime you want to see what passwords have been cracked, you can use your key on that site to lookup progress.

I'm imagining a Pi 4 B 8GB, running 4 Pwnagotchi VMs in PiMox with 512MB RAM a piece, each connected to it's own 802.11AC / bluetooth USB adapter. Since PiMox runs on top of RasPiOS, load LXQT or XFCE and connect directly to localhost in the browser to manage the VMs, and add a 4G modem to be able to upload handshakes to https://wpa-sec.stanev.org without needing to be connected to a WiFi network.

iirc you just need to register for an API key on https://wpa-sec.stanev.org/ and put that in your config in the wpa-sec section, then enable the plugin. Here-ish: https://github.com/evilsocket/pwnagotchi/blob/master/pwnagotchi/defaults.toml#L46

Bouncer on the other hand supports scoped permission assignments where the assigned permission applies to a specific model only.

That'd be great honestly, but I haven't found anything similar yet. I took a look at Bouncer but it doesn't seem to solve the problem either, just resource-based authorization too.

As well as using Spatie's Laravel Permission package, there are other packages that can be used to add roles and permissions to your application. For example, you could use Bouncer or Laratrust.

There are a few open source Laravel packages for managing roles and permissions. See https://github.com/spatie/laravel-permission or https://github.com/JosephSilber/bouncer.

In this tutorial, you'll learn how to implement RBAC in Laravel using Bouncer. Bouncer is a PHP package that lets you add roles and abilities to your Eloquent models.

I only have experience with Bouncer but it has worked well for me. As a basic hypothetical scenario, you can create different roles and abilities such as:

Another option is bouncer https://github.com/JosephSilber/bouncer