I set up a rogue EAP access point using hostapd-mana. This lets me capture hashes of credentials which can later be cracked by asleap. However, my Android phone doesn't automatically connect to my (rogue) AP even though the SSID is the same and the rogue AP's signal strength is better than the legitimate access point. Why?
There are few factors you need to have in mind when you want a "supplicant" to connect to an AP automatically. (This is called WiFi roaming)
- Signal Strength (Make sure your rogue AP signal is higher than the legitimate AP)
- ESSID (What probe requests look for)
- Encryption algorithm (Open, WEP, WPA, etc.)
- Cipher (CCMP, TKIP, WEP40, etc.)
Check all these and your device/supplicant should be able to connect automatically.