How can an Evil Twin attack be set up, so that the client will be prompted for a password and send it in plain text?

Is the above even possible? I have already set up the fake AP, but it must be configured correctly.

Which tool will be best suited for the job, and could someone provide details on how to execute the attack / find knowledge, if possible?

closed as off-topic by Neil Smithline, Deer Hunter, Stephane, WhiteWinterWolf, Matthew Jan 26 '16 at 9:17

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Neil Smithline, Deer Hunter, WhiteWinterWolf, Matthew
If this question can be reworded to fit the rules in the help center, please edit the question.


This is impossible without knowing the password (WPA prevents this). However, you can set up an open fake accesspoint and use a captive portal to get the password in clear text. This would require you to social engineer the target into connecting to your accesspoint. You can for example keep sending deauth requests to the real AP and let the captive portal on your fake AP be a fake update page.

  • Thank you - Nice to know. Could you point to a tutorial on how to set up the portal? – Shuzheng Jan 26 '16 at 16:53

Not the answer you're looking for? Browse other questions tagged or ask your own question.