1

I was trying to aireplay'ng my home WiFi but I understood that with the new generation of APs, there is a system of protected management frames. So I'm asking, is it still worth it to perform an evil twin attack? I think not, because without deauthenticating a station, the client will never go to search for a new connection.

So, what is your opinion? And is there any new way to perform an attack on WPA2?

Improve this question
3
  • 2
    Potential duplicate: security.stackexchange.com/questions/83356/…
    – schroeder ♦
    Commented Mar 23, 2020 at 13:59
  • 2
    From the top answer of the question that schroeder posted, I think this may indeed answer your question: "802.11w is NOT there to defend against someone determined who [can do X, or] can just jam every 2.4Ghz frame on those channels in that area." If the target is in signal reach, as they would be for an evil twin attack, you can probably make them look for a new access point.
    – Luc
    Commented Mar 23, 2020 at 14:34
  • 802.11w is far from common in home networks.
    – multithr3at3d
    Commented Apr 3, 2020 at 0:44

1 Answer 1

Reset to default
1

Evil twin attacks are still possible. Deauth is only one of the things that can be used in evil twin attacks, are not the most crucial. Maybe the client's WiFi is turned off, then when it is turned on, it sees the evil twin. It may try to authenticate with, and associate with, the evil twin. Even though there has been no deauth attack done on the client.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .