WiFiPhisher – Phishing WIFI passwords with Kali linux

I will first explain briefly, Phishing What is and how it works !!

• Phishing is a form of fake login interface of a certain system! make Victim confused and log in. After the victim logs in it will redirect to the page we set up first and at the same time it also send us the password that the victim entered to us ! That method is called Phishing

[toggle title=”Một Số Bài Viết Hay Về Phishing”]

[/toggle]

WiFiPhisher also works on modal Phishing as I stated above.
And it is a pity that it is not supported on Windows but only on operating systems Kali Linux.

• It is primarily a social engineering attack that unlike other methods, it does not include any forced brute. It’s an easy way for information gathering from exploited portals and third-party login pages (for example in social networks) or WPA/WPA2 pre-shared keys. Phishing in general

Working principle

After identifying the target of the attack, then WiFiPhisher will make attacks Evil Twin. All requests will then be redirected HTTP to a page cheat (Phishing) to perform your trick.

[toggle title=”Nạn nhân sẽ được đưa vào quá trình tấn công có 3 Giai Đoạn”]

• Victim gets slowed down and disconnected from his modem access point: WiFiPhisher will make wifi constantly slow down and lose connection with devices by “de-authenticate”” or separate packages make system modem malfunction.
• Victims are taken to a fake website: WiFiPhisher will introduce a rogue access point and jam the client. They will start connecting with WiFi Phisher.
• Trapped: Victims will be required to enter a password and get WiFiPhisher Customize and send it to us.

[/toggle]
[toggle title=”Yêu Cầu Hệ Thống”]

• Kali linux
• A supported wireless network card AP mode. Drivers should netlink support.
• A wireless network card with Monitor mode support and injection capability. The driver should support netlink.

[/toggle]

Download and install:

To install the latest development versions type the following commands:

git clone https://github.com/sophron/wifiphisher.git # Download the latest revision

cd wifiphisher # Switch to tool's directory

sudo python setup.py install # Install any dependencies (Currently, hostapd, PyRIC, jinja2)

How to use:

Step 1: Launch the tool by typing wifiphisher or python bin / wifiphisher (from within the tool’s directory).

By running the tool without any options, it will find the right interface and interactively ask the user to choose ESSID of the target network (in a list of all ESSIDs in the surrounding area) as well as a scam script to execute.

wifiphisher -aI wlan0 -jI wlan4 -p firmware-upgrade

Step 2: Use wlan0 set up rogue access points and wlan4 for DoS attacks. Select the destination network manually from the list and execute “Firmware Upgrade“

Step 3: Select wireless adapters. The “”Firmware Upgrade” an easy way to gain PSK from a password protected network.

wifiphisher --essid CONFERENCE_WIFI -p plugin_update -pK s3cr3tp4ssw0rd

Step 4: Automatically select the right skins. Aim at Wi-Fi with ESSID “CONFERENCE_WIFI” and do “Plugin Update” the script. The Evil Twin will need password protection with PSK
Password is: s3cr3tp4ssw0rd

Step 5: The “”Plugin Update” provides an easy way to get victims to download malicious executables (e.g. malware containing a shell payload). And will send you the password.

wifiphisher --nojamming --essid "FREE WI-FI" -p oauth-login

Method phishing This will guarantee success for you!
And I warn you this is also considered a cyber attack and breaking the law so you guys think carefully before doing hey!

AnonyViet wishes you success!