I ask this question because i am not happy with the answer here
In a normal attack such as fluxion.
- You send DEAUTH packets to the victim wifi.
- Clone their access point and host an open wifi.
- Let the victim connect and serve them a web portal where you ask for the password(social engineering)
- Compute and check the password and only let them pass when the password matches.
But wouldn't this attack be wayy more authentic if you could just tweak the router/card to host an access point that grabs the credentials when authenticating to the wifi itself.My question is based on my assumption that the router must get the password when a device tries to connect with it.
@thorium touches on the subject by saying
They cannot create a twin WPA network without knowing the password of the legitimate one
But you dont have to know the password it could contain any password when the device authenticates you grab those credentials and check them.
IS SUCH AN ATTACK POSSIBLE AND WORTH LOOKING INTO?