fern-wifi-cracker

fern-wifi-cracker puts a graphical face on Wi-Fi auditing: pick a monitor-mode interface, scan, and the discovered access points show up as a list you attack by clicking rather than assembling aircrack-ng command chains by hand. It covers WEP (fragmentation, chop-chop, Caffe-Latte, Hirte, ARP-replay, and WPS variants), WPA/WPA2 (dictionary and WPS attacks), and adds session-hijacking (passive and Ethernet) plus HTTP/HTTPS/Telnet/FTP brute-forcing and basic MAC geolocation on top. It’s the same underlying tooling as aircrack-ng — this is a workflow layer over it, useful for demos, training, and quickly working through a target list without re-typing flags for every network.

Fern is a graphical Python/PyQt application, launched into its own window from Security → Wireless Attacks → fern-wifi-cracker — there’s no terminal help step, since it doesn’t print usage to a console.

Using it

1. Select the wireless interface from the dropdown — Fern puts it into monitor mode for you.
2. Scan for access points. Discovered WEP and WPA/WPA2 networks are sorted into two separate lists as they’re found.
3. Pick a target and an attack mode. WEP targets offer the classic fragmentation/chop-chop/ARP-replay methods; WPA/WPA2 targets offer a dictionary attack (point it at a wordlist) or a WPS attack where the AP supports it.
4. Watch the attack panel — Fern shows live packet counts and handshake/key status as the underlying aircrack-suite processes run.
5. Recovered keys are logged in Fern’s own database (Key Database in the menu) for later reference.

For scripted, repeatable audits across many networks, reach for wifite or airgeddon instead — Fern’s GUI is best suited to working one target at a time.