dwpa VS Pi-hole

From what I’ve seen, typically the contributor count on wpa-sec.stanev.org has hovered around 10-15; currently it sits at 6928 and climbing (but producing only ~2x the 24hr performance of the nominal 10-15 contributors). Does someone have a cluster / network of low-power devices they’ve begun contributing? Did the service recently get published somewhere to attract new contributors? Is there a bug in the contributor-count code?

"WPA_SEC: Internet connectivity detected. Uploading new handshakes to wpa-sec.stanev.org"

It has a feature that will upon capture auto upload the hashes to places like onlinehashcrack or https://wpa-sec.stanev.org/ to crack.

main.plugins.wpa-sec.enabled = false main.plugins.wpa-sec.api_key = "" main.plugins.wpa-sec.api_url = "https://wpa-sec.stanev.org" main.plugins.wpa-sec.download_results = false main.plugins.wpa-sec.whitelist = []

I would like to try and create a plugin that checks wpa-sec.stanev.org (your nets) and compare a list of "already cracked wifi networks" and then show you the most recent cracked wifi network on your pwnagotchi.

https://wpa-sec.stanev.org/?

The wpa-sec plugin is also already there; you just need to enable it in your config.toml. There's a key you need to grab from the https://wpa-sec.stanev.org website by signing up, too. Anytime you want to see what passwords have been cracked, you can use your key on that site to lookup progress.

I'm imagining a Pi 4 B 8GB, running 4 Pwnagotchi VMs in PiMox with 512MB RAM a piece, each connected to it's own 802.11AC / bluetooth USB adapter. Since PiMox runs on top of RasPiOS, load LXQT or XFCE and connect directly to localhost in the browser to manage the VMs, and add a 4G modem to be able to upload handshakes to https://wpa-sec.stanev.org without needing to be connected to a WiFi network.

iirc you just need to register for an API key on https://wpa-sec.stanev.org/ and put that in your config in the wpa-sec section, then enable the plugin. Here-ish: https://github.com/evilsocket/pwnagotchi/blob/master/pwnagotchi/defaults.toml#L46

Si te preguntas, ¿por qué no usar Adguard o Pihole? 🤔

This is an overreaction, almost to the point of absurdity.

Risks inherent to pipe installers are well understood by many. Using your logic, we should abandon Homebrew [1] (>38k stars on GitHub), PiHole [2] (>46k stars on GitHub), Chef [3], RVM [4], and countless other open source projects that use one-step automated installers (by piping to bash).

A more reasonable response would be to coordinate with the developers to update the docs to provide alternative installation methods, rather than throwing the baby out with the bathwater.

[1] https://brew.sh/

[2] https://github.com/pi-hole/pi-hole

[3] https://docs.chef.io/chef_install_script/#run-the-install-sc...

[4] https://rvm.io/rvm/install

Pi-hole to block ads and tracking for my less technically savvy relatives

https://pi-hole.net/

I ran a competing project[0] on my home network for a few years before I discovered NextDNS[1]. What I lost in performance (requests don't leave my house) I gained in portability: ALL my devices can take advantage – at home and away – and time-saved. PiHole works 90% of the time, but when it did stop working, I'd have to spend a bit of time fixing it. At $20/year, I simply couldn't compete with NextDNS.

Note: This isn't a shill for NextDNS; I love these kinds of projects and think they absolutely should exist, but NextDNS just happens to be one of those dead-simple SaaS tools that is an insanely good value.

0 - https://pi-hole.net/

1 - https://nextdns.io

It definitely IS an option, but at the network level.

https://pi-hole.net/

It runs on damn near everything, and is a DNS level adblocker for the whole network.

I recently switched to Wipr [0]. It’s dead simple to use, and will auto update its filter lists in the background.

Adguard [1] is a decent free option.

I also use a Pi-hole [2] on my network.

[0] https://kaylees.site/wipr.html

[1] https://adguard.com/en/adguard-safari/overview.html

[2] https://pi-hole.net/

Are you trying to build a DNS proxy (similar to Pi-hole) that intercepts DNS requests and checks for the ones that look harmful? If so, I would suggest trying to separately build a DNS client and a DNS server, before trying to integrate them together. Start with Beej's Guide to Network Programming if you need to learn the basics of sockets, and then take a look at the documents that define the DNS protocol itself (RFC1034 and RFC1035).

Setup a pi-hole.

It's definitely not as simple as installing an app on your phone, but I run a Pi-hole on my home network, and it does block ads in many games.