{"id":689,"date":"2023-01-17T20:24:06","date_gmt":"2023-01-17T20:24:06","guid":{"rendered":"http:\/\/localhost\/wordpress\/?p=689"},"modified":"2023-01-17T20:24:06","modified_gmt":"2023-01-17T20:24:06","slug":"executing-the-evil-twin-wireless-attack","status":"publish","type":"post","link":"http:\/\/localhost\/wordpress\/2023\/01\/17\/executing-the-evil-twin-wireless-attack\/","title":{"rendered":"Executing the Evil Twin Wireless Attack"},"content":{"rendered":"\n<div class=\"wp-block-cover is-repeated\" style=\"min-height:300px;aspect-ratio:unset;\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-background-dim\"><\/span><div role=\"img\" class=\"wp-block-cover__image-background wp-image-693 is-repeated\" style=\"background-position:50% 50%;background-image:url(http:\/\/localhost\/wordpress\/wp-content\/uploads\/2023\/01\/evilTBlacked.png)\"><\/div><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\">\n<p class=\"has-text-align-center has-large-font-size\"><\/p>\n<\/div><\/div>\n\n\n\n<hr class=\"wp-block-separator has-text-color has-medium-gray-color has-alpha-channel-opacity has-medium-gray-background-color has-background is-style-default\"\/>\n\n\n\n<p>The following document is one of the case studies we carried out in the 1<sup>st<\/sup> semester at the Advanced Cybersecurity MSc. (Polytechnic University of Bucharest). It describes how a rogue wireless access point (a.k.a. the &#8220;Evil Twin&#8221;) can be created to mimic a legitimate one, in order to trick users to connect to it.<br><br>The paper also contains a working proof-of-concept (<a rel=\"noreferrer noopener\" href=\"https:\/\/www.malwarebytes.com\/glossary\/proof-of-concept\" target=\"_blank\">PoC<\/a>) that presents the main steps that I personally took while executing this attack (along with the needed hardware &amp; software). This is something you <strong>should try <em>only<\/em> at home<\/strong>, <strong>on your own equipment<\/strong> \ud83d\ude05.<br><br>The goal was to gracefully steal <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-yellow-color\"><em>precious<\/em> WiFi passwords<\/mark> with an Evil Twin and a little bit of <a rel=\"noreferrer noopener\" href=\"https:\/\/mstefanc.com\/2022\/03\/20\/social-engineering-playing-with-human-vulnerabilities\/\" data-type=\"URL\" data-id=\"https:\/\/mstefanc.com\/2022\/03\/20\/social-engineering-playing-with-human-vulnerabilities\/\" target=\"_blank\">Social Engineering<\/a>, instead of applying brute-force to guess them (which sometimes takes <a rel=\"noreferrer noopener\" href=\"https:\/\/www.hivesystems.io\/blog\/are-your-passwords-in-the-green\" data-type=\"URL\" data-id=\"https:\/\/www.hivesystems.io\/blog\/are-your-passwords-in-the-green\" target=\"_blank\">a little bit too much time<\/a> \ud83d\udc80).<\/p>\n\n\n\n<iframe loading=\"lazy\" src=\"https:\/\/drive.google.com\/file\/d\/1DnZtQ5aZOdCdB4zPA1zd6bKkvaym39ap\/preview\" allow=\"autoplay\" width=\"1999\" height=\"1200\"><\/iframe>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p>The PPT presentation of the paper:<\/p>\n\n\n\n<iframe loading=\"lazy\" src=\"https:\/\/drive.google.com\/file\/d\/1sXDuxfM9R8n4ueTwZfTBKzGjTVqDjDU9\/preview\" allow=\"autoplay\" width=\"1500\" height=\"800\"><\/iframe>\n","protected":false},"excerpt":{"rendered":"<p>The following document is one of the case studies we carried out in the 1st semester at the Advanced Cybersecurity<\/p>\n<p><a href=\"http:\/\/localhost\/wordpress\/2023\/01\/17\/executing-the-evil-twin-wireless-attack\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\">Executing the Evil Twin Wireless Attack<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":693,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[26,27],"_links":{"self":[{"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/posts\/689"}],"collection":[{"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/comments?post=689"}],"version-history":[{"count":11,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/posts\/689\/revisions"}],"predecessor-version":[{"id":703,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/posts\/689\/revisions\/703"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/media\/693"}],"wp:attachment":[{"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/media?parent=689"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/categories?post=689"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/localhost\/wordpress\/wp-json\/wp\/v2\/tags?post=689"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}