WPA3 SAE Downgrade Tester

WPA3 SAE Downgrade Tester — Dragonblood

Implementation of the Dragonblood attacks (CVE-2019-9494, CVE-2019-9496) against WPA3-SAE:

• Downgrade Attack — Forces WPA3-capable clients to fall back to WPA2 by manipulating beacon frames and SAE authentication responses, enabling traditional handshake capture.
• Side-Channel Attack — Timing-based attack against the SAE Dragonfly handshake that leaks information about the password through measurable response time variations.
• Group Downgrade — Forces the use of weaker elliptic curve groups in the SAE handshake by manipulating the group negotiation phase.
• Denial of Service — Exploits the computational cost of SAE commit processing to exhaust AP resources with forged commit frames.
• Transition Mode Abuse — Targets WPA3 Transition Mode (WPA2/WPA3 mixed) networks where legacy support creates exploitable downgrade paths.
• Reporting — Generates assessment report detailing which Dragonblood variants the target network is vulnerable to, with specific firmware update recommendations.