github.com/kimocoder/wifite2 · 1896bd5

90/ 100

No threats observed

No threats observed in the install and entry runs Scanned 25 Oct 2026.

Watch how it happened Scan another

NetworkRegistry only

Registry traffic only

CodeNothing taken off

no code deduction

Score

90 / 100

1000

Nothing was taken off for what the code did or what running it showed.

What it did

107 events in 28.7s

Fetched9.2s

5351546 bytes fetched inside the VM from codeload.github.com in 5221 ms; commit id verified; egress restored

Read18.2s

12 scanner finding(s)

Checked18.2s

0 locked dependencies, 0 malicious

Jev24.2s

Answered questions from the evidence

Sandbox24.2s

install completed, entry completed, 63 forged call(s)

Score24.2s

90 No threats observed

Network

nothing real left the machine

pypi.org

0 B sent in install

Forged dns

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

pypi.org

0 B sent in install

Forged dns

pypi.org

0 B sent in install

Forged dns

Show all 63 calls

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

GET

pypi.org/simple/chardet/

0 B sent in install

Forged registry

GET

pypi.org/simple/rich/

0 B sent in install

Forged registry

GET

pypi.org/simple/requests/

0 B sent in install

Forged registry

GET

pypi.org/simple/setuptools/

0 B sent in install

Forged registry

GET

pypi.org/simple/scapy/

0 B sent in install

Forged registry

files.pythonhosted.org

0 B sent in install

Forged dns

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

GET

files.pythonhosted.org/packages/82/3b/64…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/28/af/8c…8_x86_64.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/ef/55/6d…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/a0/f4/c6…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b9/1e/f0…none-any.whl.metadata

0 B sent in install

Forged registry

GET

pypi.org/simple/charset-normalizer/

0 B sent in install

Forged registry

GET

pypi.org/simple/idna/

0 B sent in install

Forged registry

GET

pypi.org/simple/urllib3/

0 B sent in install

Forged registry

GET

pypi.org/simple/certifi/

0 B sent in install

Forged registry

GET

pypi.org/simple/markdown-it-py/

0 B sent in install

Forged registry

GET

pypi.org/simple/pygments/

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/58/a2/bb…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b3/81/4d…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/92/9d/c4…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/32/d1/a3…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/7f/c5/38…8_x86_64.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/71/46/17…none-any.whl.metadata

0 B sent in install

Forged registry

GET

pypi.org/simple/mdurl/

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b3/38/89…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/82/3b/64….0.0-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/7f/c5/38…linux_2_28_x86_64.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/71/46/17…21.0-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/ef/55/6d….2.1-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b3/81/4d….2.0-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/92/9d/c4….8.0-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/a0/f4/c6…34.2-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/58/a2/bb…3.20-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b3/38/89….1.2-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/32/d1/a3…0.23-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b9/1e/f0….8.0-py3-none-any.whl

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/28/af/8c…linux_2_28_x86_64.whl

0 B sent in install

Forged registry

pypi.org

0 B sent in install

Forged dns

AAAA

pypi.org

0 B sent in install

Forged dns

GET

pypi.org/simple/poetry-core/

0 B sent in install

Forged registry

files.pythonhosted.org

0 B sent in install

Forged dns

AAAA

files.pythonhosted.org

0 B sent in install

Forged dns

GET

files.pythonhosted.org/packages/b7/25/7e…none-any.whl.metadata

0 B sent in install

Forged registry

GET

files.pythonhosted.org/packages/b7/25/7e….5.0-py3-none-any.whl

0 B sent in install

Forged registry

Luna's report

No threats observed, 90/100. Pin the exact version that was scanned and scan again before upgrading. Not verified: Behaviour outside the observed install and entry windows.

We installed the package and ran its entry point in a throwaway sandbox that answered every outbound call itself, and we scanned the code that install and import reach. The run recorded no contact outside package registries, no reads of the planted decoy credentials and no persistence writes. The code scan found no medium or high finding in reachable code.

What it ran

Installeduv · 4.6s

Entry pointenv -i HOME=/hom…T=1 FAKETIME_NO_CAC

NetworkRegistry only

MachineDestroyed after the scan

Jev's answers

answered from the evidence

Docs check

The docs do not say it makes no network calls

The docs do not say it has no side effects

Show all 3 answers

What it did fits what its docs say it is for

Flagged code check

Jev judged this code harmless

Install check

Install-time code does not use the network

Install-time code does not read credentials

Show all 11 answers

Install-time code does not run other programs or payloads

Install-time code is not obfuscated

Jev judged this code harmlesssetup.py

Jev judged this code harmlesspyproject.toml

Jev judged this code harmlesssetup.cfg

Jev judged this code harmlesswifite/__init__.py

Jev judged this code harmlesswifite/args.py

Jev judged this code harmlesswifite/config/manufacturers.py

Jev judged this code harmlesswifite/config/parsers/__init__.py

Not verified

Behaviour outside the observed install and entry windows

Code paths not triggered by install or the entry point

Show all 3 items

Payloads gated on calendar dates past the accelerated clock window, or on hosts that need real responses

Reputation

GitHubOwner 13 years old

GitHubOwner established (over a year, 3+ public repositories)

GitHub1.7K stars

GitHub845 public repos

Shown apart from the code and behaviour findings.