WebUI

Access and control GhostESP through the web interface.

The GhostNet WebUI is a browser-based control panel for managing GhostESP settings and controlling certain features. It runs on the device’s built-in access point and is accessible from any device on the same network.

Note: Wi-Fi and BLE commands cannot be run directly through the WebUI because the device’s radio is in use hosting the access point. Use Dual Communication to run these commands remotely.

Connecting to the WebUI

Prerequisites

  • GhostESP device powered on and booted
  • A computer, phone, or tablet with a web browser
  • Wi-Fi capability

Steps

  1. Find the GhostNet network

    • On your device, scan for Wi-Fi networks and look for GhostNet.
    • Connect to it using the password GhostNet.

  2. Open the web interface

    • Open a web browser and navigate to one of:
      • ghostesp.local (requires mDNS support; works on most networks)
      • 192.168.4.1 (direct IP; always works)

  3. Log in

    • Username: GhostNet
    • Password: GhostNet
    • To disable authentication, run webauth off in the serial CLI or WebUI terminal.

Tabs and Features

The WebUI has five main tabs:

Settings

Configure device behavior through multiple pages:

  • Miscellaneous: General device settings
  • WiFi: Wi-Fi configuration options
  • Evil Portal: Portal settings and credential management
  • Power Printer: Power printer configuration
  • RGB: LED/RGB lighting settings
  • Watch / RTC: Real-time clock and watch settings
  • SD Card Config: SD card configuration

SD Card

Browse and manage files on the SD card:

  • Navigate /mnt/ghostesp/ directory structure
  • Download PCAP captures, portal credentials, and other files
  • Delete files to free space
  • Upload custom portal HTML files

Terminal

Execute commands directly from the browser:

  • Type any GhostESP command (same as serial CLI)
  • View command output in real time
  • Useful for quick diagnostics and file transfers

Limitation: Wi-Fi and BLE commands (e.g., scanap, karma start, blescan) cannot run here because the device’s radio is hosting the access point. Use the Dual Comm tab to send these commands to a paired device instead.

Help

Access built-in documentation for features and commands:

  • Wi-Fi: Scanning and attack commands
  • BLE: Bluetooth Low Energy operations
  • Communication: Dual communication setup
  • SD Card: SD card operations
  • LED / RGB: LED and RGB lighting
  • GPS: GPS functionality
  • Misc: Miscellaneous features
  • Evil Portal: Portal configuration
  • Printer: Power printer features
  • YouTube Cast: YouTube casting
  • Capture: Packet capture modes
  • Beacon: Beacon spam options
  • Attack: Attack command reference

Dual Comm

Manage dual communication with a paired ESP32 device:

  • View connection status
  • Send commands to the paired device
  • Monitor dual communication link health

Important Limitations

Wi-Fi and BLE Commands Require Dual Communication

The WebUI cannot directly run Wi-Fi or BLE commands (e.g., scanap, karma start, blescan). These commands require the device’s radio hardware, which conflicts with hosting the Wi-Fi access point.

To run Wi-Fi or BLE commands from the WebUI:

  1. Set up Dual Communication with two ESP32 devices wired together.
  2. One device hosts the access point (runs WebUI).
  3. The other device performs attacks/scans.
  4. Send commands through the WebUI using commsend <command>.

Example workflow:

  • Device A (with WebUI): Hosts GhostNet AP
  • Device B (attack device): Wired to Device A via UART
  • From WebUI on Device A: commsend scanap → scans on Device B
  • From WebUI on Device A: commsend karma start → runs Karma on Device B

Commands that work directly in WebUI:

  • NFC commands (scanning, writing, saving)
  • Infrared commands (learning, transmitting)
  • File management
  • Device configuration
  • Help and diagnostics

Tips and Tricks

Faster File Transfers

  • Use a card reader connected to your computer instead of the WebUI for faster PCAP and file transfers.
  • The WebUI file manager is convenient but slower over Wi-Fi.

Disable Authentication for Local Networks

If you’re on a trusted local network:

webauth off

This removes the login requirement and speeds up access.

Access from Mobile

The WebUI is fully responsive and works on phones and tablets. Connect to GhostNet and navigate to ghostesp.local or 192.168.4.1.

Troubleshooting

Can’t connect to GhostNet

  • GhostNet not visible: Reboot the device. It should broadcast the AP within 10 seconds of boot.
  • Connection drops: Move closer to the device or check for interference.
  • Wrong password: Default is GhostNet (case-sensitive).

Can’t reach the WebUI

  • Page won’t load: Try 192.168.4.1 instead of ghostesp.local.
  • “Connection refused”: The device may still be booting. Wait 10 seconds and refresh.
  • Timeout: Check that you’re connected to the GhostNet AP, not a different network.

Login fails

  • Credentials rejected: Default is GhostNet / GhostNet (case-sensitive).
  • Forgot credentials: Reboot the device to reset to defaults.
  • Can’t disable auth: Run webauth off from the serial CLI, not the WebUI terminal.

Wi-Fi commands don’t work

  • “Command not available”: You need dual communication. See Dual Communication for setup.
  • Command times out: Verify the second device is wired correctly and powered on.

File manager is slow

  • Downloads are slow: Use a USB card reader instead.
  • Uploads fail: Ensure the SD card has free space and is properly mounted.

Next Steps