1

I set up a rogue EAP access point using hostapd-mana. This lets me capture hashes of credentials which can later be cracked by asleap. However, my Android phone doesn't automatically connect to my (rogue) AP even though the SSID is the same and the rogue AP's signal strength is better than the legitimate access point. Why?

1
  • 1
    Clients do not connect by SSID, but by BSSID (MAC). The SSID is only a human thing :) Aug 30, 2016 at 16:02

1 Answer 1

4

There are few factors you need to have in mind when you want a "supplicant" to connect to an AP automatically. (This is called WiFi roaming)

If you want to set a Rogue AP or an Evil Twin (which aren't the same) to steal credentials and/or capture packets, here's the checklist:

  • Signal Strength (Make sure your rogue AP signal is higher than the legitimate AP)
  • ESSID (What probe requests look for)
  • Encryption algorithm (Open, WEP, WPA, etc.)
  • Cipher (CCMP, TKIP, WEP40, etc.)

Check all these and your device/supplicant should be able to connect automatically.

1

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .