v1.6

Summary of Changes:

Added

• Per-AP RSN/WPA security breakdown (WPA version, AKM suites, pairwise/group ciphers, enterprise flag, PMF) in a new SecurityAP view, with human-readable decodes of the wps_config_methods and rsn_capabilities bitmasks (e.g. 0x00c0 → MFPR, MFPC) stored beside the raw values; existing databases migrate automatically.
• X.509 certificate extraction from enterprise (802.1X) EAP into the new Certificate table and CertificateAP view (based on the @x4v1l0k idea in PR #57).
• EAP enrichment on identities: realm and method-type lookup, plus EAP-MD5 challenge/response capture for offline cracking (EAPMD5 table, hashcat -m 4800).
• Probe-request fingerprinting (fingerprint, ie_order) with randomized-MAC detection, and hidden (cloaked) SSID recovery from probe responses and (re)association requests.
• AP management-capability detection from beacons/probe responses (802.11r/k/v fast roaming, Multiple BSSID, Channel Switch Announcement) in a new CapabilitiesAP view.

Fixed

• Parsing/detection corrections: inflated WPS error count and SSID-dependent WPS 2.0 detection; MFP/PMF now read from RSN capability bits (capable vs required); cloaked and firstTimeSeen no longer clobbered when a later frame enriches an AP; EAP Success/Failure frames no longer counted as Identity errors.
• asyncio child-watcher crash on Python 3.14.
• Container fixes: in-container self-update (git now shipped) and non-root/podman writes to the bind-mounted db.SQLITE; plus Docker build, dependency CVEs and Codacy findings (including a SQL injection).

Updated

• Merged the 1:1 Security, WPS and probe-fingerprint attributes onto the AP/Probe rows, and improved the SummaryAP view (grouped by SSID and encryption, showing WPA version, PMF, every manufacturer and client counts).
• Slimmed the Docker image ~360 MB → ~220 MB (Alpine base, ship only hcxpcapngtool, drop build caches); amd64/arm64 builds, the full test suite and the built image now verified in CI.
• Refactored internals with no behaviour change: split the oversized utils/wifi_db_aircrack.py into modules behind a re-export facade and cut parser/DB cyclomatic complexity below the Codacy limit (shared safe_insert/cap_runner, lookup tables); public parse_* API and callers unchanged.
• Refreshed the bundled IEEE OUI / mac-vendors database (~16k new vendor prefixes).

Full Changelog: v1.5...v1.6

v1.5

Summary of Changes:

• Minor flake8 changes
• Fixed naming and function issues
• Updated unit tests and added tests with real data
• Enhanced Docker compatibility and version control
• Improved error handling and subprocess management
• Ensured compatibility with different platforms
• Updated dependencies and README instructions
• Bumped ftfy dependency twice
• Various workflow enhancements and bug fixes

---

Pull requests

• Add header README and remove pull_request docker by @r4ulcl in #27
• Add wifi_db image by @r4ulcl in #28
• codefactor fix SQLi, SHA256, update README by @r4ulcl in #29
• Bump ftfy from 6.1.1 to 6.1.3 by @dependabot in #34
• Dev to master v1.5 by @r4ulcl in #37

Full Changelog: v1.4.1...v1.5

v1.4.1

What's Changed

• Fix error in v1.4 by @r4ulcl in #26

Full Changelog: v1.4...v1.4.1

v1.4

What's Changed

• v1.4 - Flake8 and auto update by @r4ulcl in #25

Full Changelog: v1.3...v1.4

v1.3

What's Changed

• Bump nest-asyncio from 1.5.6 to 1.5.7 by @dependabot in #20
• Update README and dependabot update by @r4ulcl in #21
• Bump nest-asyncio from 1.5.7 to 1.5.8 by @dependabot in #22
• Dev to main - Enhancements and Bug Fixes by @r4ulcl in #24

Full Changelog: v1.2...v1.3