Trending
#Security & Privacy

martin-olivier/airgorah

A GUI tool for Linux that audits nearby WiFi networks: capture traffic, run deauth attacks, grab handshakes and crack passwords.

4,748
798
Rust
MIT
4 years old

The problem

Auditing your own WiFi — or a network you're authorized to test — usually means stringing together aircrack-ng suite commands: putting the card into monitor mode, scanning, targeting an AP, deauthenticating a client to force a handshake, capturing it, then running a cracking step. Each step is a separate tool with its own flags, and the state is scattered across terminal sessions. Airgorah bundles that workflow into one desktop application.

What's different

The usual approach is manual aircrack-ng (or similar CLI suites) where you keep track of interface names, capture files and target BSSIDs yourself. Airgorah puts the whole flow — capturing nearby WiFi traffic, discovering clients on each access point, deauthentication, handshake and PMKID capture, and password cracking — behind a GTK4 interface, so the discovery and attack steps share state instead of being re-typed. The second differentiator is how it handles privilege: the UI runs as a normal user under both X11 and Wayland, and only elevates through a small airgorah-agent launched via polkit when a privileged operation is needed, rather than running the whole app as root. It's also written in Rust, which is unusual for this category of tool.

Who it's for

Linux users who need to check their own wireless security and prefer a GUI over memorizing aircrack-ng invocations — pentesters on Kali or Arch doing quick on-site checks, and homelab owners verifying that their AP and client configuration hold up. You should look elsewhere if you're on Windows or macOS: this is Linux-only. You also need a wireless card that supports monitor mode and packet injection; a typical laptop's built-in adapter often doesn't, so plan for a compatible external adapter. Anyone looking for a scriptable, headless pipeline for repeatable engagements will find the GUI in the way and is better served by the CLI tools directly. And obviously, this is for networks you own or are authorized to test.

Cost of adoption

Requirements are Linux, a monitor-mode/packet-injection capable wireless card, GTK4, and a polkit-based privilege prompt. Installation is via crates.io or the AUR; the README points to a wiki page for instructions rather than inlining them. The license is MIT, so there are no licensing constraints worth worrying about. The README itself is thin — feature claims are a couple of sentences and everything operational lives in the wiki, so read that before committing. Expect some friction with adapter compatibility and with polkit configuration on non-desktop or minimal distros. The project has been around since September 2022 and is actively maintained enough to have a working CI setup.

Verdict

Airgorah is an established utility rather than a flash-in-the-pan: it is roughly four years old, has about 4.7k stars, and only recently crossed the weekly Rust trending board with +531 stars in a week — a burst of attention on a project that already had a long tail. That pattern usually means a mention somewhere drove a one-off spike, not that the tool changed. The GUI-over-aircrack-ng idea is genuinely useful for occasional audits but adds little for people who already have scripts. If you're on Linux with a capable adapter and audit WiFi rarely, it's worth the installation; if you audit often, stay with the CLI.

Written by AI from the project's README, updated October 24, 2026. The project's own docs are the source of truth.