2

So I have been playing around with the aircrack-ng suite and beef a mitmf. Until now I have been able to host an Evil Twin with DHCP server and providing internet access to connected clients while capturing all their packets.

Now imagine there is an AP that uses WPA2 encryption, but I already know the password to it. I can run airbase-ng with the -W and -Z flags and copy the encryption methods used by the original (real) AP. The thing is that I cannot provide a password for, so when others get deauthenticated from the real one they are unable to access the internet via my Evil Twin.

To make it clear, I don't want the WPA2 password, I already have it, I just want to perfectly spoof the other AP even it's WPA2 password so devices are able to connect to me automatically. (Basically let airbase-ng complete the 4 way handshake)

Is that possible with the air-ng tools? I'm running kali linux by the way.

  • try wifiphisher it has a pre-shared key option – Maybe helpful Mar 27 at 2:18
1

From Airbase-ng site, yes you can.

You need the following command: airbase-ng -c 9 -e teddy -z 2 -W 1 rausb0 where:

  • -c 9 specifies the channel
  • -e teddy filters a single SSID
  • -z 2 specifies TKIP
  • -W 1 set WEP flag because some clients get confused without it.
  • rausb0 specifies the wireless interface to use

I tired to achieve what you're trying to do once, and the problem is within the encryption protocol. You need to make sure that you're using the correct one. TKIP or CCMP.

  • Yeah man I know about this, but there is no parameter specifying the password. I was actually able to do this today with hostapd, where I can specify the password as well as all the other configurations in a configuration file. This way devices automatically connect to my AP thinking it is a trusted one, tries the password and even that works. – Esser420 Aug 28 '16 at 17:47
  • have you tried -s force shared key authentication and -S set shared key challenge length (default: 128) along with WPA ? – Emadeddin Aug 29 '16 at 6:15
  • yes but doesn't work, those options are not what I'm looking for. Seriously try it with hostapd, it's one hell of a way to man in the middle someone. – Esser420 Sep 1 '16 at 20:47

protected by Community Mar 27 at 8:09

Thank you for your interest in this question. Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).

Would you like to answer one of these unanswered questions instead?

Not the answer you're looking for? Browse other questions tagged or ask your own question.