Install on macOS

Supported: macOS 12 or later. Release binaries are not published yet, so you build from source; the result is a single wpg executable with the web UI embedded. macOS ships libpcap, so no extra library is needed: scripts/build.sh (and just release) build the libpcap backend (pcap feature) automatically on macOS, because it is the only way wpg can send there (--no-pcap leaves it out). Release archives include it too.

1. Install the prerequisites

xcode-select --install                     # compiler and linker
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
brew install wireshark                     # optional: tshark, and ChmodBPF (see below)

git clone https://github.com/SeiyaFunaokaJP/web-packet-generator.git
cd web-packet-generator
./scripts/setup.sh                         # add --just to also install the just task runner

scripts/setup.sh installs the Rust toolchain pinned in rust-toolchain.toml with the WASM target, and a prebuilt trunk at the version pinned in scripts/versions.env.

2. Build

./scripts/build.sh --release        # or: just release

The last line printed is ==> done: target/release/wpg.

3. Try it without any privileges

./target/release/wpg doctor
./target/release/wpg template lint templates/examples/*.wpg.yaml
./target/release/wpg render templates/examples/arp-sweep.wpg.yaml -o /tmp/arp.pcapng

4. Allow sending

Sending goes through /dev/bpf*. Either run wpg with sudo, or make the devices accessible: installing Wireshark with its ChmodBPF helper does this for members of the access_bpf group. wpg doctor prints the exact hint for your machine; see Permissions.

5. Start the server

./target/release/wpg serve

wpg listens on 127.0.0.1:8080 by default and loads the templates under ./templates. Open http://127.0.0.1:8080 in a browser and continue with First login.

Send your first frames

./target/release/wpg ifaces
sudo ./target/release/wpg send templates/examples/arp-sweep.wpg.yaml -i en0 --rate 1000pps

Only send on networks you own or are authorised to test. Continue with the ARP sweep tutorial.

Release binaries: Gatekeeper and quarantine

Release archives (wpg-<version>-aarch64-apple-darwin.tar.gz for Apple silicon, ...-x86_64-apple-darwin.tar.gz for Intel) are not signed or notarised. A file downloaded with a browser gets the com.apple.quarantine attribute, and Gatekeeper then refuses to run it (““wpg” cannot be opened because Apple cannot check it for malicious software” or “… is damaged”). Building from source as above avoids this completely.

Check the download first, then remove the attribute from the extracted files:

shasum -a 256 -c wpg-0.2.0-aarch64-apple-darwin.tar.gz.sha256   # or compare with SHA256SUMS
tar -xzf wpg-0.2.0-aarch64-apple-darwin.tar.gz
xattr -dr com.apple.quarantine wpg-0.2.0-aarch64-apple-darwin
./wpg-0.2.0-aarch64-apple-darwin/wpg --version

Alternatives:

• Download with curl -LO instead of a browser: curl does not set the quarantine attribute.
• Try to run it once, then allow it in System Settings → Privacy & Security (“Open Anyway”); macOS asks again on the next start and then remembers it.
• The Finder shortcut (Control-click → Open) was removed in macOS 15 and never applied to command-line tools; use xattr or System Settings.

Do not disable Gatekeeper globally (spctl --master-disable). Remove the attribute again after every upgrade, since each new download is quarantined. For running wpg at boot, see Running as a service.