HACK WIFI ACCOUNT FROMPHISHING ATTACK WITH WIFIPHISHER

WiFi Phishing Attack With WifiPhisher Tool

Wifiphisher is a security tool that mounts fast
automated phishing attacks against WiFi networks
in order to obtain secret passphrases and other
credentials. It is a social engineering attack that
unlike other methods it does not include any brute
forcing. It is an easy way for obtaining credentials
from captive portals and third party login pages or
WPA/WPA2 secret passphrases.

From the victim's perspective, the attack makes use in three phases:

1. Victim is being deauthenticated from her access point. Wifiphisher continuously jams all of the target access point's wifi devices within range by sending deauth packets to the client from the access point, to the access point from the client, and to the broadcast address as well.

2. Victim joins a rogue access point. Wifiphisher sniffs the area and copies the target access point's settings. It then creates a rogue wireless access point that is modeled on the target. It also sets up a NAT/DHCP server and forwards the right ports. Consequently, because of the jamming, clients will start connecting to the rogue access point. After this phase, the victim is MiTMed.

3. Victim is being served a realistic router config-looking page. Wifiphisher employs a minimal web server that responds to HTTP & HTTPS requests. As soon as the victim requests a page from the Internet, wifiphisher will respond with a realistic fake page that asks for credentials, for
example one that asks WPA password confirmation due to a router firmware
upgrade.

Requirements
1. Kali Linux.
2. Two wireless network interfaces, one capable of injection.

Click Here to DOWNLOAD
All Rights Reserved © Ethical Hacking Tricks 2015