Pwnagotchi: Whitelist not working [BUG]

[elipsius]

Describe the bug
Whitelist no matter how entered is not used, my SSID is still pwned.

To Reproduce
Steps to reproduce the behavior:

1. Launch with whitelist enabled and provide SSID list
2. wait
3. It will start pwning the whitelisted SSIDs and pcap files will appear.

Expected behavior
Should not pwn whitelist SSIDs
Whitelisted SSID pcap files should not show up

Environment (please complete the following information):

• Pwnagotchi version 1.1.1
• pwnagotchi image download 1.1.1
• Raspberry Pi 3+
• Google WiFi mesh is being whitelisted

[Generic42]

I'm also seeing this behavior.

I've attempted the following white list formats
First attempt:

main:
  name: 'pwnagotchi'
  whitelist:
    - 'YourHomeNetworkMaybe'
    - 'Your  Second home Maybe'
  plugins:
    grid:
      enabled: true
      report: true
      exclude:
    - 'YourHomeNetworkMaybe'
    - 'Your  Second home Maybe'

Other attempt

main:
  name: 'pwnagotchi'
  whitelist:
    - YourHomeNetworkMaybe
    - Your  Second home Maybe
  plugins:
    grid:
      enabled: true
      report: true
      exclude:
    - YourHomeNetworkMaybe
    - Your  Second home Maybe

[nucow69]

I noticed that too. Then I saw that the FAQ on pwnagotchi.ai says:
Your access points handshakes get still captured. This only prevents the deauth of the clients.

[elipsius]

Mine looks similar to this:

main:
    name: 'mygotchi'
    whitelist:
        - 'MYNetwork'
        - 'TheOtherNet'
    plugins:
        grid:
            enalbed: true
            report: true
            exlude:
                - 'MYNetwork'
                - 'TheOtherNet'

And the problem still occurs, I see it in the UI as well
Would be nice if the all attempts or captures did not occur if this they are whitelisted

• No pcaps and ignore SSID totally

[dadav]

Guys, like @nucow69 said already, this is an expected behaviour. The whitelisted APs won't get "pwned" aka. deauthed, but captured. This is not a bug.

[evilsocket]

As per docs:

Your access points handshakes get still captured. This only prevents the deauth of the clients.

[fennectech]

This should be mentioned on pwnagotchi.ai's configuration page. Thank you for the info :3

[RussellTaylor83]

Adding this to the docs would make a lot of sense. I'll see if I can add it and get it past PR.