Live data from Hacker News

Efficient Wi-Fi Phishing Attacks

tripwire.com

21–26 of 26 posts

Re: Efficient Wi-Fi Phishing Attacks

#21
post #14

Earlier quoted context omitted.

Not OP, but I have a cron job on a Raspberry Pi running every minute checking for known MACs with `arp-scan`. I then get an audible warning.

Would you mind posting a link to this utility? Sounds like an awesome tool!

+1 ... can we get a github repository on this.

Re: Efficient Wi-Fi Phishing Attacks

#22
post #8

Earlier quoted context omitted.

> (I use this as pre-doorbell warning sometimes, waiting for my parents or girlfriend to connect when nearby) That's such a great idea! Could you give more details of how are you doing that? Which tools did you use?

Not OP, but I have a cron job on a Raspberry Pi running every minute checking for known MACs with `arp-scan`. I then get an audible warning.

Does the fact that iOS randomly changes the MAC address while scanning for networks affects this in any way?

Re: Efficient Wi-Fi Phishing Attacks

#23
post #15
post #8

Earlier quoted context omitted.

> (I use this as pre-doorbell warning sometimes, waiting for my parents or girlfriend to connect when nearby) That's such a great idea! Could you give more details of how are you doing that? Which tools did you use?

I turn my phone's hotspot on with the desired settings and run the following in bash (it runs Debian stuff in userspace using ru.meefik.linuxdeploy) tcpdump -i wlan0 -c 1 arp; aplay isd/media/0/*.mp3 This waits on the wifi interface for one ARP packet, which will surely come when a new device connects, and then plays some mp3 that's on my internal sdcard (hence the mountpoint "isd").

[deleted]

Re: Efficient Wi-Fi Phishing Attacks

#24
post #22

Earlier quoted context omitted.

Not OP, but I have a cron job on a Raspberry Pi running every minute checking for known MACs with `arp-scan`. I then get an audible warning.

Does the fact that iOS randomly changes the MAC address while scanning for networks affects this in any way?

No - `arp-scan` only works if someone is associated with your AP. If I was using `airmon-ng` or similar, then yes, iOS MAC randomization would affect performance. Although, once the phone connects to the AP, `airmon-ng` may still work.

Re: Efficient Wi-Fi Phishing Attacks

#25
post #11
post #9

Earlier quoted context omitted.

even with HSTS?

If a website employs the use of HSTS all traffic will be redirected to HTTPS, rendering the support for HTTP redundant.

Hmm, if you can control the plaintext network isn't there an NTP attack to reverse time and use old compromisable certificates or move it forward past hsts max age?

Re: Efficient Wi-Fi Phishing Attacks

#26
post #22

Earlier quoted context omitted.

Does the fact that iOS randomly changes the MAC address while scanning for networks affects this in any way?

No - `arp-scan` only works if someone is associated with your AP. If I was using `airmon-ng` or similar, then yes, iOS MAC randomization would affect performance. Although, once the phone connects to the AP, `airmon-ng` may still work.

Thanks for clarifying!
Post reply on HN