0

This question already has an answer here:

Is it possible that for instance I have one access point that it requires a password for authorization to access to modem and internet.

I want to edit this step like a user when he/she click to the wireless adress as usual it will ask password of wifi and whatever when they typed correct or wrong password it will automatilly connect to the modem and i can see the password what they write?

marked as duplicate by Marcus Müller, schroeder Dec 17 '16 at 19:53

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • My question was not same as you dublicated one.In evil twins attack the wifi is not secured anyone easly can access it but i was going to ask that corresponding wifi will be looks like secured but whatever when he/she write anything for password i want to see what they write. – Fi. Dec 17 '16 at 20:30
-1

If you're hacker, you can create "evil twin access point" or called "Rogue access point" by aircrack-ng suite or Reaver, and Pixiewps or wifiphiser. After do follow instruction and wait maybe you can capture password what user login

  • 1
    That's not how evil twin attack works... You can't get the wifi password cause client never sends it – Mr. E Dec 17 '16 at 19:57
  • Mr.E with evil twin attack works, I can combined with MITM attack to fool the client and create the password with WPA and when client type true password to login, I can use Ettercap or wireshark to capture it. right?. And this is the tough question. Two way: 1. You just create the access point without password 2. You can use RADIUS server to monitor the client but can't see password what they write I wonder if why you need password they type wrong or true if you allow they login your wireless router – Rei Dec 17 '16 at 20:45
  • I don't understood what you said. What evil twin attack does is clone some AP MAC address and BSSID, then deauthenticate a client to make him connect to your rogue access point (Without password so he can connect). This happens cause WPA protocol can't check AP authenticity. Once he is connected to your AP you can either give him internet access through a bridge and watch all http traffic or you can create an evil portal trying to fool the user to provide the WPA password. But evil twin attack won't give you the WPA password if you can't trick the user to enter it AFTER he connects to rogue AP – Mr. E Dec 17 '16 at 21:49
  • Evil twin attack if attack alone it's impossible, but if it combined with MITM attack and DDOS AP. when client can't get access to true AP.They will get access to fake AP, client give attacker KEY(password of true AP)? someone can trick people with that method. Right , actually if attacker can't trick the user to enter password, after he connect to rogue AP, but if AP can be DDOS attack, ICMP flood and the users can't connect to true AP. What will they do? Mr.E – Rei Dec 17 '16 at 22:12
  • @Mr.E I have no idea whether the attack you describe works. But if it does work, I would consider that a very serious design flaw in WPA. – kasperd Dec 17 '16 at 22:14

Not the answer you're looking for? Browse other questions tagged or ask your own question.