Timeline for Whats the difference between an evil twin and a rogue access point?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 29, 2021 at 9:30 | comment | added | schroeder♦ | I call "BS" on Evil Twin being considered a Rogue AP. The wiki article is not a "definition". It has no citation. In fact, the original version called it a "honeypot" until a single user edited it. There is no explanation. And that discussion point directly contradicts the lead paragraph of the article. So, quoting this wiki article as authoratative is dubious and not strong enough to stand on as justification especially since the same article can be used to prove that an Evil Twin is not a Rogue AP.. | |
| Mar 3, 2017 at 10:15 | vote | accept | Halvar Is | ||
| Mar 2, 2017 at 21:08 | comment | added | OscarAkaElvis | Anyway, even if you know the key of the network, you can't clone it 100% because as I said, If you perform DoS attack to the legitimate network is going to affect to your network too (same channel, BSSID, ESSID). The other option is as you said, just have better signal (which is very difficult usually) and not perform DoS... in that case they can connect automatically but is a very strange and uncommon scenario. | |
| Mar 2, 2017 at 21:07 | comment | added | Azteca | Let us continue this discussion in chat. | |
| Mar 2, 2017 at 21:06 | comment | added | OscarAkaElvis | In Evil Twin you try to trick the user, so is the reason to put same channel. To be as much similar as possible. Is an usual practice of Evil Twin. Regarding the BSSID, exactly, the users usually don't know about that. Is the reason because is the unique element almost but not complete equal. And the consequence of this is: if is not 100% equal, there is not automatic connection for the users. | |
| Mar 2, 2017 at 21:06 | comment | added | Azteca | Well... I was parting from the point of the Evil twin already knowing the key of the network, hence the right Encryption, hence, merging with the original network. | |
| Mar 2, 2017 at 21:02 | comment | added | Azteca | Should click what? In a network list it's almost always only listed the ESSID, not the BSSID, the user doesn't even know about the Evil Twin he only selects the "network name". Same channel? Why would you even do that? That might create interference, you only need more signal strength and hope for the configuration to have higher "roaming aggressiveness" | |
| Mar 2, 2017 at 20:50 | comment | added | OscarAkaElvis | If you have doubts, check it out. Look at known scripts how they do Evil Twin attacks: airgeddon, Linset. You can check what I'm talking about! In addition, I'll say, usually you clone a network with security but you usually don't know the key of that wifi network. So the Evil Twin is different (an open network) than the user victims have saved in their devices. So the Evil Twin has a big percentage of "social engineering" part. | |
| Mar 2, 2017 at 20:48 | comment | added | OscarAkaElvis | Not exactly. In an Evil Twin, you can "clone" a network but not entirely. I mean, it is supossed you clone "almost all" network characteristics.For example usually is cloned SSID, same channel but the BSSID usually is cloned except one digit. The reason is because an Evil Twin usually is launched at the same time with a DoS to the legitimate network to force users to disconnect. And your fake network can't be exactly the same or the clients of fake network will be kicked too. So the user usually should click voluntairly in the fake network as a consecuence of desperation of not having internet | |
| Mar 2, 2017 at 20:44 | comment | added | Azteca | Evil twin or Rogue AP are undetectable by the user or the Device, they are basically an exploit of the Wi-Fi roaming feature. Most devices for simplicity just connect to known networks. Actually there are techniques/courses to find rogue AP inside corporate networks. | |
| Mar 2, 2017 at 20:39 | history | edited | OscarAkaElvis | CC BY-SA 3.0 |
added 194 characters in body
|
| Mar 2, 2017 at 20:34 | history | answered | OscarAkaElvis | CC BY-SA 3.0 |