Jump to content
Nytro

Wifiphisher - Fast automated phishing attacks against WPA networks

Recommended Posts

Posted

[h=2]About[/h] Wifiphisher is a security tool that mounts fast automated phishing attacks against WPA networks in order to obtain the secret passphrase. It is a social engineering attack that unlike other methods it does not include any brute forcing. It is an easy way for obtaining WPA credentials.

Wifiphisher works on Kali Linux and is licensed under the MIT license.

From the victim's perspective, the attack makes use in three phases:

  • Victim is being deauthenticated from her access point. Wifiphisher continuously jams all of the target access point's wifi devices within range by sending deauth packets to the client from the access point, to the access point from the client, and to the broadcast address as well.
  • Victim joins a rogue access point. Wifiphisher sniffs the area and copies the target access point's settings. It then creates a rogue wireless access point that is modeled on the target. It also sets up a NAT/DHCP server and forwards the right ports. Consequently, because of the jamming, clients will start connecting to the rogue access point. After this phase, the victim is MiTMed.
  • Victim is being served a realistic router config-looking page. wifiphisher employs a minimal web server that responds to HTTP & HTTPS requests. As soon as the victim requests a page from the Internet, wifiphisher will respond with a realistic fake page that asks for WPA password confirmation due to a router firmware upgrade.

68747470733a2f2f736f7068726f6e2e6769746875622e696f2f77696669706869736865722f6469616772616d2e6a7067

Performing MiTM attack

[h=2]Usage[/h] [h=2]Screenshots[/h]

68747470733a2f2f736f7068726f6e2e6769746875622e696f2f77696669706869736865722f7373312e706e67

Targeting an access point

68747470733a2f2f736f7068726f6e2e6769746875622e696f2f77696669706869736865722f7373322e706e67

A successful attack

[h=2]Requirements[/h]

  • Kali Linux.
  • Two network interfaces, one wireless.
  • A wireless card capable of injection.

[h=2]Credits[/h] The idea belongs to Dan McInerney who also authored two essential modules of this script, wifijammer and fakeAP.

[h=2]License[/h] Wifiphisher is licensed under the MIT license. See LICENSE for more information.

Sursa: https://github.com/sophron/wifiphisher

Posted

@Nytro

Ai testat?

Mie imi returneaza asta:

root@localhost:~/tools/wifiphisher# python wifiphisher.py
WARNING: No route found for IPv6 destination :: (no default route?)
[*] Starting HTTP server at port 8081
[*] Starting HTTPS server at port 444
[+] Networks discovered by wlan0: 2
[+] Starting monitor mode off wlan0
Monitor is: wlan0
Traceback (most recent call last):
File "wifiphisher.py", line 747, in <module>
print "For the AP is: " + ap_iface
TypeError: cannot concatenate 'str' and 'bool' objects

###

Cu monitor activat(mon0)

Dupa ce se apare eroarea se opreste si monitorul de pe wlan0*NU am citit codul scriptului, nu stiu sa-l interpretez.*

###

root@localhost:~/tools/wifiphisher# python wifiphisher.py
WARNING: No route found for IPv6 destination :: (no default route?)
[*] Starting HTTP server at port 8081
[*] Starting HTTPS server at port 444
Monitor is: mon0
For the AP is: wlan0
[*] Cleared leases, started DHCP, set up iptables
Traceback (most recent call last):
File "wifiphisher.py", line 761, in <module>
sniffing(mon_iface, targeting_cb)
File "wifiphisher.py", line 342, in sniffing
sniff(iface=interface, prn=cb, store=0)
File "/usr/lib/python2.7/dist-packages/scapy/sendrecv.py", line 561, in sniff
s = L2socket(type=ETH_P_ALL, *arg, **karg)
File "/usr/lib/python2.7/dist-packages/scapy/arch/linux.py", line 455, in __init__
self.ins.bind((iface, type))
File "/usr/lib/python2.7/socket.py", line 224, in meth
return getattr(self._sock,name)(*args)
socket.error: [Errno 19] No such device

Posted (edited)
@Nytro

Ai testat?

Mie imi returneaza asta:

root@localhost:~/tools/wifiphisher# python wifiphisher.py
WARNING: No route found for IPv6 destination :: (no default route?)
[*] Starting HTTP server at port 8081
[*] Starting HTTPS server at port 444
[+] Networks discovered by wlan0: 2
[+] Starting monitor mode off wlan0
Monitor is: wlan0
Traceback (most recent call last):
File "wifiphisher.py", line 747, in <module>
print "For the AP is: " + ap_iface
TypeError: cannot concatenate 'str' and 'bool' objects

###

Cu monitor activat(mon0)

Dupa ce se apare eroarea se opreste si monitorul de pe wlan0*NU am citit codul scriptului, nu stiu sa-l interpretez.*

###

root@localhost:~/tools/wifiphisher# python wifiphisher.py
WARNING: No route found for IPv6 destination :: (no default route?)
[*] Starting HTTP server at port 8081
[*] Starting HTTPS server at port 444
Monitor is: mon0
For the AP is: wlan0
[*] Cleared leases, started DHCP, set up iptables
Traceback (most recent call last):
File "wifiphisher.py", line 761, in <module>
sniffing(mon_iface, targeting_cb)
File "wifiphisher.py", line 342, in sniffing
sniff(iface=interface, prn=cb, store=0)
File "/usr/lib/python2.7/dist-packages/scapy/sendrecv.py", line 561, in sniff
s = L2socket(type=ETH_P_ALL, *arg, **karg)
File "/usr/lib/python2.7/dist-packages/scapy/arch/linux.py", line 455, in __init__
self.ins.bind((iface, type))
File "/usr/lib/python2.7/socket.py", line 224, in meth
return getattr(self._sock,name)(*args)
socket.error: [Errno 19] No such device

Si eu primesc exact aceeasi eroare.

//edit: Am rezolvat asta, insa acum imi da alta eroare...

UThsa6R.png

Edited by Byte-ul

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.



×
×
  • Create New...