Files
sabia/ROADMAP.md
T
Lucas RayanandClaude Opus 5.5 791538c9d9 v0.1.0: logo, i18n pt/en, CI com caches, testes e documentação
- Logo oficial (sabia.png) e conjunto de ícones do app desktop.
- Interface em português e inglês: tradutor por observação do DOM, seletor
  de idioma e checagem de cobertura de tradução no CI.
- CI/CD com caches (rust-cache, .deb do Tauri em cache) e pipeline de release
  multiplataforma (CLI em 5 alvos + app desktop via tauri-action), templates
  de issue/PR.
- Suíte de testes de integração do sabia-core (scan e2e, handshake/crack
  4-way e PMKID, pcap, trilha de auditoria) — 46 testes verdes.
- Documentação completa pt/en: README, ROADMAP, SECURITY, CONTRIBUTING,
  CHANGELOG e docs/ (cli, interface, arquitetura), com enquadramento de uso
  autorizado.
- Correções de clippy (-D warnings) e formatação em toda a árvore.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-23 12:46:19 -03:00

1.5 KiB

Roadmap

English · Português

Sabiá does Wi-Fi auditing: it discovers networks, captures handshakes (4-way and PMKID), cracks WPA/WPA2-PSK by offline dictionary and tests deauthentication with authorization. Always for authorized use, with a local audit trail.

Done (0.1.0)

  • Monitor mode and channel control via netlink/iw.
  • Scanning of 2.4, 5 and 6 GHz: APs and clients, with SSID, BSSID, channel, signal and security.
  • Raw 802.11 capture via AF_PACKET (no libpcap), radiotap and management-frame parsing.
  • Capture of the 4-way handshake (EAPOL) and the PMKID.
  • Offline dictionary cracking (PBKDF2-HMAC-SHA1, MIC and PMKID) for WPA/WPA2-PSK.
  • .pcap read and write; offline .pcap analysis.
  • Authorized deauth (--yes flag).
  • Local hash-chained audit trail; doctor diagnostics.
  • CLI + desktop app (Tauri) + local UI server; one-click update.

Next

  • Rules and masks in cracking (hashcat style), beyond the plain dictionary.
  • 22000 export to take the handshake straight to hashcat/John.
  • GPU acceleration for PMK derivation.

Later

  • WPS attack (PIN/Pixie Dust) in authorized testing.
  • Rogue AP / evil twin for client assessment, with authorization.
  • Capture on Windows via Npcap.

Long term

  • WPA3/SAE: detection and downgrade paths where applicable.
  • Validation on varied hardware (chipsets and regulatory domains).
  • Signing of release binaries (SmartScreen/Gatekeeper).