cSploit / android

cSploit - The most complete and advanced IT security professional toolkit on Android.
http://www.csploit.org/
GNU General Public License v3.0
3.26k stars 1.1k forks source link

Fluxion like fake ap. #815

Open pahapoika opened 7 years ago

pahapoika commented 7 years ago

Hey! Lately i have been using Fluxion to break into wifi. One of the coolest things that Fluxion can do is called: wifi MiTM. It basically creates fake ap with same ssid and then it deauths users from current wifi. Then when the victim connects to fake ap (usually does that automatically, cause it's open) it redirects user to fake login page for "security". The attacker Will see the password victim entered to fake login page.

Simple and No need for bruteforcing.

Github: https://github.com/deltaxflux/fluxion

IwraStudios commented 7 years ago

so it's an extended evil twin? evil twin is going to be a module in cSploit2

pahapoika commented 7 years ago

@IwraStudios Evil twin? Can you provide link?

IwraStudios commented 7 years ago

https://en.wikipedia.org/wiki/Evil_twin_(wireless_networks) http://null-byte.wonderhowto.com/how-to/hack-wi-fi-creating-evil-twin-wireless-access-point-eavesdrop-data-0147919/ it's less aggressive than what your description, but it's the same principle

pahapoika commented 7 years ago

@IwraStudios Oh. I think Fluxion is better and maybe Even easier to add.

deltaxflux commented 7 years ago

I agree

pahapoika commented 7 years ago

@Rubenoo @DeveloppSoft @tux-mind

Whats your opinion. We got the go from Fluxion owner.

Rubenoo commented 7 years ago

Fluxion is great, but we already got a similar module planned for cSploit2. I'm not an expert and I don't know what the actual differences are between eviltwin module (that's planned for cSploit2) and fluxion. And I don't know how hard it's gonna be to implement fluxion into cSploit instead of the eviltwin module. I think that @DeveloppSoft and @tux_mind can better decide/think about this :)

pahapoika commented 7 years ago

@Rubenoo I feel like EwilTwin is FakeAP for normal MiTM attack when Fluxion is FakeAP to get WiFi password.

ETeissonniere commented 7 years ago

Hey, I have implemented a fake AP + the karma attack from sensepost in cSploit2! That's all :grin: hope it help you