Passive Wi-Fi Monitoring
Observes nearby 802.11 management traffic without packet injection or active probing.
PWD-Box
Portable Wireless Defence Box
Raspberry Pi Wireless Defense Project
PWD-Box forpassive monitoringportable monitoringevidence-led monitoringtouch-ready monitoringdefensive monitoring
Portable Wireless Defence Box is a passive-only watchdog that listens to 802.11 management traffic, detects deauthentication flood activity, and stores local evidence on-device for later review.
Repository: https://github.com/PiouV2/PWD-Box
session-preview.log
$ sudo env PYTHONPATH=. .venv/bin/python -m src.main monitor --interface wlan1
[ok] monitor mode validated on wlan1
[scan] passive AP observation active
[alert] deauth spike detected, threshold exceeded
[evidence] pcap saved to sessions/2026-06-08_1142/evidence.pcap
[storage] sqlite session + alert rows committed
Core Capabilities
PWD-Box is a Raspberry Pi-based passive wireless monitoring tool focused on deauthentication visibility, local evidence retention, and practical touchscreen operation.
Deauthentication Detection
Flags suspicious deauthentication flood behavior with conservative detection logic.
SQLite Session Logging
Stores sessions and alert records locally for post-incident analysis and audit trails.
PCAP Evidence Capture
Writes packet evidence snapshots during detections to support structured review.
Touchscreen Interface
Operated through a simple Raspberry Pi touchscreen workflow for field usability.
Passive-Only Safety Boundary
Designed for defensive monitoring use where explicit authorization to monitor exists.
Documentation & Setup
This project is a Raspberry Pi-based passive wireless monitoring tool. It validates interface readiness, performs passive packet observation, detects likely deauth flood conditions, and stores local evidence using SQLite and PCAP files.
setup.commands
$ git clone https://github.com/PiouV2/PWD-Box$ python3 -m venv .venv$ source .venv/bin/activate$ pip install -r requirements.txt$ sudo env PYTHONPATH=. .venv/bin/python -m src.ui
Use only on networks and environments where you have explicit authorization to monitor wireless traffic.
Project Structure Snapshot
explorer
src
FILE
main.pyFILE
health.pyFILE
config.pyFILE
models.pycapture
FILE
wifi_sniffer.pyFILE
packet_parser.pydetection
FILE
deauth_detector.pyorchestration
FILE
session_manager.pyevidence
FILE
pcap.pystorage
FILE
db.pyui
FILE
app.pyFILE
controller.pyscreens/
FILE
alerts.pyFILE
dashboard.pyFILE
diagnostics.pyFILE
networks.pyFILE
pcap_settings.pyFILE
settings.pyFILE
settings_evidence.pyFILE
settings_network.pyFILE
settings_system.pyFILE
setup.pyMD
README.mdFILE
requirements.txtScreenshots
Representative visuals for monitoring flow, alerts, and deployment context.
Monitoring Dashboard
Session state, AP observation, and monitoring status in one view.
Alert & Evidence Flow
Deauth alerting with local evidence capture and review workflow.
Raspberry Pi Deployment
Compact deployment model for controlled defensive monitoring environments.