Wi-Fi Phishing AttacksWifiphisher is designed to conduct phishing attacks on Wi-Fi networks to obtain access point (AP) passwords and other personal information.
From the victim's perspective, the attack consists of three phases:
⏺The victim deauthenticates from their access point. Wifiphisher continuously jams all devices with Wi-Fi access points within range by sending deauthentication packets to the client from the access point, to the access point from the client, and to the broadcast address.
⏺The victim connects to a rogue access point. Wifiphisher scans the area and copies the settings of the target access points. It then creates a rogue AP with a special configuration. It also installs a NAT/DHCP server and forwards ports. Consequently, due to the jamming, clients will begin to connect to the rogue access point. The victim is then subjected to a man-in-the-middle attack.
⏺The victim will be presented with a realistic-looking router configuration page. wifiphisher spins up a minimal web server and responds to HTTP and HTTPS requests. Once the victim requests a web page, wifiphisher will respond with a realistic fake page that asks for a password. An example of a task that requires WPA password confirmation is firmware updates.
