search

s0lst1c3 / eaphammer

Targeted evil twin attacks against WPA2-Enterprise networks. Indirect wireless pivots using hostile portal attacks.
GNU General Public License v3.0
2.19k stars 313 forks source link

EAPHammer 802.11ac support for WPA2-Enterprise over EAP-TTLS (EAP-SIM / EAP-AKA)? #52

Open mocredz opened 5 years ago

mocredz commented 5 years ago

Hi all, I am testing a network that is strictly running on 802.11ac (5 GHz band), just want to check in to see if EAPHammer currently can support 802.11ac to intercept creds for WPA2-Enterprise over EAP-TTLS?

I issued the following flags and got the error below: ./eaphammer -i wlan0 --wpa 2 --essid "<essid>" --creds ./eaphammer -i wlan0 --auth wpa --essid "<essid>" --creds

authentication failed - EAP type: 0 (unknown)
Supplicant used different EAP type: 3 (unknown)

^ Not sure because there are EAP types going on like EAP-SIM/EAP-AKA/EAP-AKA' ?

Then, when I specify a channel in the 100's range, for example as follows, it gives the error below: ./eaphammer -i wlan0 --wpa-version 2 -c 111 -auth wpa -e "<essid>" --creds

[!] The hw_mode specified in hostapd.ini is invalid for the selected channel (g, 111)
[!] Falling back to hw_mode: a

Thanks in advance!

ss23 commented 5 years ago

This issue has a few things going on in it, but I would also like to see support for AC implemented.