Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [evil-twin]

An evil twin is a wireless access point that is configured the same as a legitimate router in an attempt to get users to connect to the attackers router to allow for man in the middle attacks.

0
votes
0answers
38 views

How can I perform DNS rebinding using evil twin at the local level?

How can I perform DNS rebinding using evil twin at the local level? I want to perform a DNS-Rebinding-Attack using an evil twin on local level. The curl command to login into the router curl "http:...
0
votes
1answer
104 views

is it possible to create a WEP wifi that accepts any password?

the same as evil twin fluxion but without captive portal so the victim connects to our fake Wep Wifi that accepts any password after getting disconnected from his Wpa 2 Wifi so we sniff data from the ...
0
votes
1answer
53 views

is it possible to evil twin a WPA 2 Wifi using one of EAP methods?

the same as fluxion but without the captive portal just like this video Stealing 802.1x Credentials with Rogue AP & RADIUS server he was able to get the username and the password of an EAP wifi ...
0
votes
0answers
23 views

evil twin like attack [duplicate]

Is it possible to make a fake AP with the same SSID that has a password and when clients try to access it and type a password, the software verifies it with a handshake?
0
votes
1answer
121 views

How can I use parabolic antenna to strengthen access point signal for evil-twin penetration testing?

I am using TP-LINK TL-WN722N v1.x for evil-twin penetration testing but the signal is not stronger than the target access point, so the attack is easily recognizable. I am trying to figure out how can ...
-2
votes
1answer
124 views

Is it possible to obtain someone's private IP through IP logging?

Let's say Alice sends Bob a link through email, social media etc. The link logs Bob's IP if Bob clicks the link. If I'm correct, the IP Alice gets is Bob's public/ISP IP address. Is it possible for ...
2
votes
1answer
96 views

Create Evil Twin with encryption and intercept input

I know how to create an Evil Twin of a WiFi network using Hostapd. However, I can only create an unencrypted network with eventually a fake login page. While this can be work with some kind of ...
0
votes
0answers
27 views

wifi hacking: evil twins WPA2-PSK phishing [duplicate]

I have created a Rouge access point using dnsmasq and hostapd with WPA2 configuration with the same SSID as my wifi network. It works fine and clients can connect to my Rouge AP. The question is: Is ...
7
votes
3answers
695 views

Does WPA3 OWE mean the return of Evil Twins?

When WPA3 has a reasonable level of market penetration, one of its key selling points is Opportunistic Wireless Encryption (OWE). In other words, a Starbucks can have a network without a password, and ...
3
votes
1answer
734 views

Is someone trying to break in my WIFI router?

We have a WIFI router with SSID: "dummyssid" with our own WPA2 password. Today unexpectedly, another WIFI SSID was available in the WIFI scan list with exactly same as of our SSID: "dummyssid" but ...
0
votes
1answer
209 views

Does getting a challenge and response with hostapd-wpe mean that credentials were sent?

I setup an access point to perform an "evil twin" attack on an existing WPA2 Enterprise network (I have permission to do this). I am using hostapd-wpe. Within a short period of enabling the access ...
3
votes
1answer
716 views

MsChapV2 authentication and Evil Twin attack

I'm trying to understand the dynamics of the authentication process in the MS-CHAPV2 protocol. In particular, if I implement an Evil Twin attack I can't understand how it's possible that I can ...
3
votes
2answers
216 views

Can you defeat evil twins using public and private keys?

I came across evil twins which to my understanding are malicious WiFi networks broadcasting the same Ids as other legitimate ones. People then unknowingly automatically connect and are at risk. I ...
0
votes
1answer
2k views

Can't connect to fake AP with airbase-ng

I use kali-rolling on a virutal machine and I try to set up a fake access point using airbase-ng, but my devices won't connect to it whatsoever. My steps are: I put my wirless adapter in monitor mode ...
1
vote
0answers
116 views

Can not create an “evil twin access point” with the same SSID as the original

I am practising pen-testing for a while now and I have a kali Linux 2017.2 physical machine. I tried to create an evil twin access point using tools like fluxion, wifiphisher and wifi-pumpkin. Note ...
0
votes
1answer
242 views

Fake secured WiFi network to harvest password [duplicate]

I'm not finding a lot of information on this topic although it seems so simple, so I assume it isn't possible, but I was wondering if it is possible or not to create a fake acces point that looks like ...
0
votes
0answers
183 views

How does the Evil Twin SQL injection query works?

I have been reading about SQL injection and got hit at Evil Twin SQL injection here. There are two queries mentioned in the article as follows. -1' union select 1,2,3,(select (@) from (select(@:=0x00)...
6
votes
1answer
374 views

MITM over wireless

I was trying to perform MITM attack over wireless. The thing I used is airbase-ng --essid "FAKEAP" -c 10 wlan0mon to create a fake access point. This created a tap interface at0 on which I ran isc-...
0
votes
1answer
262 views

Caffe-Latte attack in Python

I have a github project called 'Evil-Twin Framework' which basically is a very extensible Wi-Fi pentesting framework. I'm not going to delve into the details but basically one can code any type of Wi-...
4
votes
2answers
668 views

How to mitigate evil twin WIFI social engineering attack?

I just come across this article: Capturing WPA Passwords by Targeting Users with a Fluxion Attack. Although WIFI Evil Twin attack and WIFI de-authentication attacks is known for a long time, a ...
0
votes
1answer
507 views

Evil Twin Attacks against WPA-TLS

Today I'm getting into the details of WPA-Enterprise. Most of what I saw was difference between protocols that use certificates. Most posts say that EAP-TLS is the most secure authentication protocol ...
3
votes
2answers
2k views

Is the Karma attack still relevant today?

I tried replicating the Karma attack and it does not work on my iphone5s and galaxy s6. Even when the phones send out directed probe requests and the Rouge AP responds with the appropriate probe ...
5
votes
2answers
666 views

Evil Twin Access Point Secured-Unsecured

A very similar question was asked here but it didn't get any reply, so I'm going to ask a new question with some more insights. The problem of the most common Evil Twin Attack is that the fake AP is ...
3
votes
1answer
435 views

Redirect a user to a trap page using evil twin

The company where I work gave my team a "Security Information" training today and at the end they presented a video that exemplifies how vulnerable an open wireless network is. In this video the "...