[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"project-83336":3},{"id":4,"name":5,"fullName":6,"owner":7,"repo":5,"description":8,"homepage":9,"htmlUrl":10,"language":11,"languages":10,"totalLinesOfCode":10,"stars":12,"forks":13,"watchers":14,"openIssues":15,"contributorsCount":15,"subscribersCount":15,"size":15,"stars1d":13,"stars7d":16,"stars30d":16,"stars90d":15,"forks30d":15,"starsTrendScore":17,"compositeScore":18,"rankGlobal":10,"rankLanguage":10,"license":19,"archived":20,"fork":20,"defaultBranch":21,"hasWiki":22,"hasPages":20,"topics":23,"createdAt":10,"pushedAt":10,"updatedAt":28,"readmeContent":29,"aiSummary":10,"trendingCount":15,"starSnapshotCount":15,"syncStatus":30,"lastSyncTime":31,"discoverSource":32},83336,"KTO","Ymsniper\u002FKTO","Ymsniper","WiFi deauthentication tool that kicks every device off a target network - except the ones you whitelist by MAC address. It continuously scans for non‑whitelisted devices and deauths them the moment they appear or try to reconnect.","",null,"Python",198,10,4,0,137,61,3.12,"MIT License",false,"main",true,[24,25,26,27],"bandwidth","deauthentication-attack","whitelist","wifi","2026-06-12 02:04:33","# KTO 🦿 Kick Them Out\n\nPoint it at an SSID and it automatically discovers every connected client and kicks them — including ones that try to reconnect — with no manual targeting needed.\n\nTools like `aireplay-ng` make you supply a BSSID and a client MAC. You have to know who's on the network first, and if someone reconnects you have to catch them yourself and run it again. KTO does all of that automatically in a loop: continuous scan → live client list → auto deauth → repeat. Anyone who reconnects gets caught on the next sweep.\n\n> **Authorized use only.** Only run this against networks you own or have explicit written permission to test. Unauthorized deauthentication is illegal in most jurisdictions.\n\n---\n\n## Features\n\n- **Live blacklist** — client list updates every sweep, new joiners get kicked automatically\n- **Auto deauth** — no manual targeting, runs fully unattended\n- **Aggressive mode** — scan and deauth threads run in parallel so there's no reconnect window between sweeps\n- **Whitelist** — spare specific devices via inline MACs or a file\n- **Mesh \u002F multi-AP** — handles SSIDs that span multiple BSSIDs, auto-picks the strongest or lets you choose\n- **PMF detection** — warns you when 802.11w is active and unprotected frames will be dropped by patched clients\n- **Dual deauth engine** — Scapy raw 802.11 frames (default) or aireplay-ng\n- **Live table** — `--live-table` shows a refreshing client table instead of scrolling log, good for demos\n- **Session log** — `--log FILE` saves every kick with a timestamp, appends across sessions\n- **Passive mode** — `--scan-only` discovers and logs clients without sending any frames\n- **Auto monitor mode** — enables and restores monitor mode automatically via airmon-ng\n- **OUI lookup** — shows Apple \u002F Samsung \u002F etc next to each MAC\n- **Self-updating** — checks for new releases on startup and notifies you if one is available\n\n---\n\n## Requirements\n\n```bash\n# Python 3.10+\npip install scapy\n\n# aircrack-ng suite\nsudo apt install aircrack-ng\n```\n\nMust be run as root.\n\n---\n\n## Installation\n\n```bash\ngit clone https:\u002F\u002Fgithub.com\u002FYmsniper\u002FKTO.git\ncd KTO\npip install scapy\n```\n\nNo other setup. Single script, no config files.\n\n---\n\n## Usage\n\n```\nsudo python3 kto.py -i \u003Cinterface> -t \u003CSSID> [options]\n```\n\nThe interface needs to be in monitor mode, or pass `--auto-monitor` to let KTO handle it.\n\n### Arguments\n\n| Flag | Default | Description |\n|------|---------|-------------|\n| `-i`, `--interface` | required | Wireless interface (e.g. `wlan0mon`) |\n| `-t`, `--target` | required | Target SSID name |\n| `-w`, `--whitelist` | — | Comma-separated MACs to spare |\n| `--whitelist-file FILE` | — | File of MACs to spare, one per line (`#` = comment) |\n| `-c`, `--channel` | auto | Lock to a specific channel |\n| `-n`, `--count` | 5 | Deauth frames per burst per direction |\n| `-s`, `--sleep` | 5.0 | Seconds between sweeps |\n| `--scan-duration` | 8.0 | Seconds airodump-ng listens per sweep |\n| `--delay` | 0.1 | Per-client delay in aggressive loop |\n| `--broadcast` | off | Also deauth `ff:ff:ff:ff:ff:ff` |\n| `--aireplay` | off | Use aireplay-ng instead of Scapy |\n| `--aggressive` | off | Parallel scan + deauth threads |\n| `--scan-only` | off | Passive mode, no frames sent |\n| `--auto-monitor` | off | Auto-enable monitor mode via airmon-ng |\n| `--auto-bssid` | off | Auto-pick strongest BSSID for mesh \u002F multi-AP SSIDs |\n| `--reason` | 7 | 802.11 reason code (1=unspecified, 4=inactivity, 7=class3-frame) |\n| `--log FILE` | — | Save timestamped kick log to a file |\n| `--live-table` | off | Refreshing client table instead of scrolling output |\n\n---\n\n## Examples\n\n```bash\n# basic\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\"\n\n# let KTO handle monitor mode\nsudo python3 kto.py -i wlan0 -t \"CorpNet\" --auto-monitor\n\n# aggressive mode — no reconnect window\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" --aggressive\n\n# spare your own device\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" -w AA:BB:CC:DD:EE:FF\n\n# passive discovery only, no deauth\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" --scan-only\n\n# mesh or multi-AP network\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" --auto-bssid\n\n# save a log and show live table\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" --log session.txt --live-table\n\n# heavier burst with aireplay-ng\nsudo python3 kto.py -i wlan0mon -t \"CorpNet\" -n 10 --aireplay --broadcast\n```\n\n---\n\n## Whitelist file format\n\n```\n# my phone\nAA:BB:CC:DD:EE:FF\n\n# laptop\n11:22:33:44:55:66\n```\n\n---\n\n## Notes on PMF \u002F 802.11w\n\nIf the target AP has Protected Management Frames enabled KTO will warn you at startup. Clients with 802.11w support will silently drop unprotected deauth frames, so effectiveness depends on which devices are connected.\n\n---\n\n## Stopping\n\n`Ctrl+C` stops everything cleanly, restores the interface to managed mode if KTO created the monitor interface, and prints a session summary with burst counts per client.\n\n---\n\n## License\n\nMIT — see [LICENSE](LICENSE)\n",2,"2026-06-11 04:10:59","CREATED_QUERY"]