This question already has an answer here:

Let's say I create an unsecured evil twin for a Wi-Fi AP that is secured.

If I successfully deauth the victim and get his device to choose my evil twin to connect to, will he get a message alerting him that this network was previously secured and that now it's not? Or will the device try to reconnect without providing a password?

If it's a case of "it depends", what does it depend on? The device's OS Wi-Fi implementation? Or the Wi-Fi protocol used?


marked as duplicate by BadSkillz, techraf, Xander, John Deters, Stephane Nov 8 '16 at 8:46

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • You cannot make a client to connect to you if the original ssid is secured and evil twin one is insecure . – 8zero2.ops Nov 2 '16 at 15:43
  • .after deauth it will connect back to original one only – 8zero2.ops Nov 2 '16 at 15:45
  • @BadSkillz not a duplicate, I'm not talking about capturing the password. – jeremy Nov 2 '16 at 15:50

The user's device can distinguish the Evil Twin from the original AP

In this case the attack can't work if the deauthenticated user doesn't connect manually to your evil twin (And he doesn't notice it's not protected)

Not the answer you're looking for? Browse other questions tagged or ask your own question.