The reason I don't think this would work is because no one knows their wifi password.
Wifiphisher: Fast automated phishing attacks against WPA networks
11–20 of 58 posts
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#12I wondered why the deauth in step 1 works, it sure looks like that's one of the shortcomings in WPA and there is just no workaround - except going with WPA2. http://security.stackexchange.com/questions/20219/preventing...
It'll work against WPA2 as well, the link you provided is confusingly worded. There's currently no technical way of preventing deauth attacks as 802.11 management frames are always unencrypted / unsigned.
802.11w aims to address this by authenticating management frames but is slow in coming to market and plagued with interop issues: http://en.wikipedia.org/wiki/IEEE_802.11w-2009
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#13This looks really cool. However, when I first read the words "social engineering", I expected it to create another access point encrypted the same way , and get the code direct from the victim. This way seems less fool-proof. Is my suggestion at all possible, or is the code transmitted while connecting useless unless you already have it? (Well it's not useless , as it can be brute-forced by aircrack-ng locally. I'm w…
Your method sounds to me like a pretty standard PSK crack: deauth client, collect auth handshake, repeat until you have enough packets to crack the passphrase. But collecting enough packets to crack the PSK becomes more difficult as the number of clients disconnecting/reconnecting goes down and the complexity of the PSK goes up. If you're trying to connect to a home AP with a halfway-decent passphrase, it can take days (or weeks) to collect enough auth packets.
Man-in-the-middle, on the other hand, takes almost no time at all - just a gullible user with the passphrase. This method seems like it would be especially effective against most home APs, which is the same case that is less-than-ideal for the other method.
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#14I don't see how this tests the security of a setup if it is relying on a user submitting the password themselves. There is no way to protect against your own or the stupidity of others.
A reasonable use case would be demonstrating the weakness of a naive setup to a business that wanted to charge for access.
I've never seen a password protected paid-wifi set up. Using arp and spoofing your Mac address is often enough to pretend you are an authenticated client to most of these systems.
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#15The reason I don't think this would work is because no one knows their wifi password.
This was my thought, too - and those that do would recognize the fake control panel.
I think it's becoming more and more common for the PSK to come on a sticker from the all-in-one router/modem your ISP sends you. So, the user never sets a passphrase, never sees the control panel, and has the key ready to hand out by just looking at their "internet box." This attack is perfect for that.
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#16A bit off-topic - I have noticed that python is used way more on the hacker/security community than other scripting langs (Perl,Ruby), anyone know why?
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#17This looks really cool. However, when I first read the words "social engineering", I expected it to create another access point encrypted the same way , and get the code direct from the victim. This way seems less fool-proof. Is my suggestion at all possible, or is the code transmitted while connecting useless unless you already have it? (Well it's not useless , as it can be brute-forced by aircrack-ng locally. I'm w…
[deleted]
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#18A bit off-topic - I have noticed that python is used way more on the hacker/security community than other scripting langs (Perl,Ruby), anyone know why?
Isn't Python, in general, significantly more widely used than Perl and Ruby outside their narrow popularity domains (sysadmin for Perl, RoR web apps for Ruby)? Just a guess.
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#19Neat idea, but why can't it spoof the Wifi authentication page/popup? Can't it dress up as a new device and try to connect to the wifi network, and then see what kinds of authentication page is returned by the router? Then just copy that.
Re: Wifiphisher: Fast automated phishing attacks against WPA networks
#20A bit off-topic - I have noticed that python is used way more on the hacker/security community than other scripting langs (Perl,Ruby), anyone know why?
From what I know, python is usually the first language that newbies get pointed to when they ask where to start. It's easy to read, understand, and has a ton of libraries.
Plus python is older, and I think gained more popularity than ruby (before rails came along).