Don't Miss: Using Aircrack-ng to Create an Evil Twin Access Pointĭeploying Airgeddon in a coffee shop.This screen that contains terms and conditions is something people are used to seeing, and we'll be using that to our advantage to create a phishing page that looks like the router is updating. A captive portal is something like the screen you see when connecting to an open network at a coffee shop, on a plane, or at a hotel. In a captive portal-style evil twin attack, we will use the Airgeddon wireless attack framework to try to force the user to connect to an open network with the same name as the network they trust. This works great for tricking a user into connecting if we have a network with the same name, same password, and same encryption, but what if we don't know the password yet? We won't be able to create a network that will trick the user into connecting automatically, but we can try a social engineering attack to try to force the user to give us the password by kicking them off the real network. A network sniffing tool like Wigle Wifi on Android or Kismet can clearly see the difference between these networks, but to the average user, these networks will look the same. If you want to see how this works, you can create a Wi-Fi hotspot on your phone and name it the same as your home network, and you'll notice it's hard to tell the difference between the two networks or your computer may simply see both as the same network. In fact, many networks will have several network-extending access points all using the same name to expand access without confusing users. This actually makes it very hard to distinguish between networks with the same name and same kind of encryption. An evil twin attack is a type Wi-Fi attack that works by taking advantage of the fact that most computers and phones will only see the 'name' or ESSID of a wireless network.

Wireshark tutorial deutsch