evil-plug-weaponizer | server side and client side source code

evil-plug-weaponizer is a PHP library. evil-plug-weaponizer has no bugs, it has no vulnerabilities and it has low support. You can download it from GitHub.

This is the server side and client side source code for the "Smart Plug, Evil Plug" hacking demo. Affected Device is Kankun/Konke smart plug. Vulnerability is "Konke Smart Plug K - Authentication Bypass Vulnerability" found here The scripts in this repository are meant to weaponize the Smart Plug and help you set up the server side dashboard. Once set up and plugged in, the smart plug will scan for wireless networks in its vecinity, randomly clone one of them, implement DNS poisoning and fake Facebook captive portal to perform phishing. Once credentials are submitted, the plug is supposed to switch from AP to STA mode and connect to an open WiFi network and send stolen credentials over a DNS request, however for the purpose of the demo, I had the plug connect to my phone's hotspot, so the prior needs to be programmed in.