How Hackers Can Grab Your Passwords Over Wi-Fi with Evil Twin Attacks
ฝัง
- เผยแพร่เมื่อ 12 ธ.ค. 2019
- Airgeddon Used for an Evil Twin AP with Captive Portal
Full Video: nulb.app/x4a3p
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Cyber Weapons Lab, Episode 010 (Recut - Partial Episode)
Wi-Fi networks can be set up by smart IT people, but that doesn't mean the users of the network are similarly tech-savvy. We'll demonstrate how bad actors can use am evil twin attack to steal Wi-Fi passwords. Essentially, they kick a user off their trusted network while creating a nearly identical fake one they connect to. This forces the victim to connect to the fake network and supply the Wi-Fi password to regain internet access.
While a more technical user might spot this attack, it's surprisingly effective against those not trained to look for suspicious network activity. The reason it's so successful is that most users don't know what a real firmware update looks like, leading to confusion in recognizing that an attack is in progress. By knowing all this, it's easier to spot and avoid your Wi-Fi password from being taken right from under you.
To learn more, check out the article and more in-depth video on our website: nulb.app/x4a3p
Follow Null Byte on:
Twitter: / nullbyte
Flipboard: flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/channels/nullbyte - แนวปฏิบัติและการใช้ชีวิต
![Hack WPA & WPA2 Wi-Fi Passwords with a Pixie-Dust Attack using Airgeddon [Tutorial]](http://i.ytimg.com/vi/SY0WMHTCCOM/mqdefault.jpg)
Very good tutorial. Well explained. 👍
In reality he blink at the same time we blink so we can’t see when he close his eyes.
???
It's how the Kody hacks you.
@@NullByteWHT 🤣🤣🤣
this comment makes no sense..if you were to busy watching his eyes and not listening you have no clue :D..there's not alot to see...the way he explains it with his voice hits the nail on the head ...'blinking' has nothing to do with this video explaining this dual wifi exploit..and i thought i was drunk!.. + he has to be careful now as youtube are probably pushing him into a corner attempting to de monetise his content ..which in ALL honesty the public interested in there online security needs to see ...catch 22 really go figure
He blinks like every 10 seconds.
One of the few who share their knowledge generously, thank you very much🇲🇦👏👏👏👏👏👏👏👏👏👏
Thanks beauty in! We really do put in a lot of hard work.
شرحي شنو كيقول راه مكنفهموش الانجليزية ؟؟
@@rachidbouali6887 HADA VIDEO TAYAALAM KIFASH GARASSINAT TAYSSARGOU KALIMAT SIR NTAA LWIFI BISTAMAAL 2HOUJOUM FI NAFSS ALWAGT.
Best content on TH-cam, without question
Bah! Are they just trying to demonetize you, or are they removing content? I'm not trying to hack anybody. I'm just trying to understand enough to not become a victim...lol! Anyway, great video. Thank you for sharing!
You can always find all of our content on our website null-byte.wonderhowto.com/
This is a video encouraging hacking.
I'm glad you're doing this, because I shelled out $50 to build a wifi pumpkin-pi last month only to find that the software was broken! I can finally put all those tools to use.
The great thing about the Pi is that there are so many uses for it.
Do you need a 2 wifi adapter or onky 1?
Great quality video. I think it is ok to skip the demo time for the attacker side but not for the victim side. That way, viewers can understand how tricky it is. And viewers who want more just have to try it 😏
Thanks for the input, we'll think about it.
But whoever is that dumb to type in their password into a captive portal prompt on their home/work router which obviously is not supposed to be there, deserves to the hacked. lmfao!!
lol omg people are more worried about your blinking than youtubes ban, thanks for the video
Is there a tool that can run a MITM like this, but without the fake portal, instead, when the victim attempts to connect to the evil AP, it will capture the connection packet with the password, and try it against the real AP?
I am relatively new to all of this so bare with me. Is it not possible to create a locked network exactly like the target network and when they try to connect and input the actual password in their settings not a web to make everything more believable (this obviously wont work since our new locked network has a random ass password ) cant we just capture the error key they sent to our network and test it on our machine against the targets previously saved wpa2 handshake.
Question I can test this I havent done this myself yet but what's the odds of passing the hash aka input the hash In place of the the password
I sometimes download these vids so that whenever i go to a place with no internet or a very poor connection, I may get bored.
For sure and you can check out the website too null-byte.wonderhowto.com/
@@NullByteWHT I've got an idea for your next video,
It's an article that i read on the websuite that tells you on "How to not look like a noob while atrending DEF CON" , perhaps you could cover this in a video that would help both hackers and other intrested people who may consider attending the event.
How to configure the phishing page on this airgeddon?
Can it work with TP link 300mbps USB Wi-Fi adapter ?
Does it require 2 wifi adapters ?
How to save/autosave only the *WiFi password*(not login page details) the victim puts in the clone network? (To only know the WiFi password)
Airgeddon keeps disconnecting AP from AP when initializing evil portal, and no deauth is done like that. How do I repair that?
Man , You Are A living legend
and you are a living cringe
Which is the best wifi adapter for network or wireless network hacking? For Kali Linux
Check out our adapter guide nulb.app/x45q
this videos really help me I'm starting to get into cyber security and videos have helped a lot
this guy used to be extremely fucking creepy back when he first shot these videos. Now he is just a sweet guy who just happens not to know how to blink
OMG OMG OMG the cats are back! Happy happy happy, Joy joy joy! :-)
😺😺😺
@@NullByteWHT 🥰
Thanks for a great vid. Sorry TH-cam is a peice nowadays. Keep up the great work.
Marvin Waxler thanks for watching! Tell all of your friends about us! 😃
What can i do if only 2 pop up on my screen ap and dhcp, what about the others deauth,control,dns?
I have a question??? Once they put their password into the fake router page. Does it reconnect them back on the internet. So they are relieved and don’t call say “their provider”. You know what I’m saying???
Can you share the adaper that you used?
Can you do it without tools.. As it can be done with Dhcpd, airbase-NG and iptables for rerouting
Most likely, tools just make it easy.
why evil twin is not automatically connect the victim to fake ap? Please Reply Sir.thank you
Nice haircut Kody
Thanks 😃♥
Can you put social media phishing pages ?
So what if someone puts a link to the disclaimer (or even the "accept terms" checkbox) on the fishing page which really describes everything what is going on. Noone ever reads it, but would it enable then to perform such attack perfectly legally? I.e. user grants permission to perform an attack by checking the "accept terms" checkbox(just like we grant permission to use all our private data to google, ms, apple, etc by accepting their terms..
Good thought but it likely wouldn't hold up in court, it's basically just a scam then.
Should we need 2 wifi adaptor for phis attack
Isn't it possible to figure out the wrong password attempt (target would've entered the password to his network) ? Rather than pursuing the target to enter the password into a phishing page.
I too have the same doubt ! I researched about how to get log wrong attempts by the users but it is not possible I think so. If it possible then it is so easy to setup AP with same name and get the wrong attempts. before that we can do deauth the actual AP.
Can I use my laptop adapter as fake ap and dongal as scanner
Helo sir ,
For how much time would it be appropriate and safe (for the wireless card) to run the airgeddon evil twin attack ?
It depends on the location and if people are looking for weird activity.
HE BLINKED
Is wireless network adaptor is included??
Hey Kody, would you be able to do a video on SSL stripping?
Good idea Jakob Wilson, I've added it to the list of video ideas.
I love your lessons
Youcef Ch thanks for watching! Tell all of your friends about us! 😃
Why don't he blink ?? I think this guy is a machine 😳
thanks for sharing, sir
How can we use our own captive portal page via with this tool? Like if i know person is using which router, suppose its of Cisco so i created my own captive portal of Cisco and want to use with airgeddon how am i suppose to do that?
Lookup the code on GitHub and modify it.
How to become a cybersecurity professional: make your self a tattoo that in 4:00
It's even a cipher.
Which laptop should I prefer for good performance and security ..?
Kody uses a MacBook Pro as his daily driver.
Thanks again great video.
Thanks! We really do put in a lot of hard work.
I tried using this attack using argeddon but the fake access point is not generating and i suppose there ia a problem in AP window or DHCP window, rest all the functions are performing properly i had installed all the required tools and i am also able to capture the handshake. Please i am stuck and i know i am step away from achieving it.....
plz I have some truble with hostapd.conf nl80211 couldn't find driver ...
i have Kali Linux on VM v 5
and alfa adapter rtl8187
Can you add English subtitle to the video in null byte website please..
"when you create a fake wireless network, especially one that's based" - Null Byte
Thank you
Do you need two wireless cards?
the guy doesn't blink
i serch my youtube history just to watch this again 👍
legend says that null byte still replies to comments
0:59
FBI open up!!!
gottem
Hi Null Byte :) Fellow Software/Bug bounty guy here, hope you are well.
Hey man, cool channel I like the long form python tutorials on the email bomb and keylogger.
@@NullByteWHT Thanks :) I uploaded an hour-long python ransomware tutorial the other day lol, but since reading some comments here I may cut-down on the "hacking" tutorials for a bit seems TH-cam is not a safe place for us atm. I enjoy your channel, great stuff, thanks for the content. Have good day :)
Yeah they took down a few of our videos but we keep everything up on our website. null-byte.wonderhowto.com
Can you make a collaboration with another TH-camr named LiveOverflow?
Would be very interesting! :D
We'll look into it 😉
AYYY
COLLAB COLLAB COLLAB
Do you have an e mail or something an get this information somewhere else and I tired your sit it did not help
Sir in useland mitm in websploit doesn't work sir please make a video on it plzzzzzzzzz sir
Bro this man's face cmoes up every wifiphisher video I click
Does we need 2 wifi adaptor s
You look a little different, darker hair colour? Something I can’t put my finger on, but you’re looking confident and happy🎩😇
Thanks!
Hackers “http networks are insecure” also hackers “got to this http link” 😬 lol and we have to go check your awesome videos 🙃
Yes haha, and checkout our website null-byte.wonderhowto.com
Hey kody u are my hero man. i like u more..
The world's best teacher
Good job sir ........................
Dj Tahir thanks for watching! Tell all of your friends about us! 😃
do you need 2 wireless net. adp.?
if yes can i do it with 1
one more thing does it work against phones?
thanks
You need two, one to connect to your internet and one to attack the target. And yes they are just small computers.
@@NullByteWHT thanks
You can also do this attack with your laptop's internal wifi card bro, without buying a new external wireless adapter ( but that is only if your laptop's internal wifi card supports monitor mode and packet injection).
@@DrawingWithNoobArtist it does but dont i need 2 adapters anyway?
nope, you dont require 2 adapters.This attack can be performed with your laptop's internal wifi card only.(But only if your laptop's internal wifi card supports monitor mode and packet injection.)
Need Help - Evil Twin Attack
Issue : Evil twin attack failed to create fake acces point
When doing hands-on on wifi hack using evil twin method, im not able to see any fake acces point has been created.Looks have some issue in AP window like below.
hostapd_free_hapd_data : Interface Wlan 0 wasn't started
How to solve this? Please help...
thankyou for education
And just like that, in blink of an eye, my network was hijacked.
Minus the blink, the Kody isn't programmed to blink.
Sir,
Got Error ( on this screen, its supposed an additional wifi interface is chosen, but you don't have anyone at this moment) help..
Same problem is coming you got any solution?????
I’m using kali Linux and ran sudo setup.py etc but it telling me to use python 🐍 3 so now I’m lost
Just watched the whole video on website, are two wifi adapters needed?
Yes probably. One to de authorize an user by sending an DAuth signal and one is a new fake AP
Yes 2 wifi connections
@@NullByteWHT Awesome thank you!
@@ashish00007 Makes sense, thank you!
no
I did all steps but i didn't receive the fake login page what should I do?
Bruh! Why would you type sudo when you're root?!! Nice vid btw
exactly mate!
Mistakes were made....
@@NullByteWHT hey can i ask you a question?
@@rythm3756 yes ask ?
@@shekhar81 i forgot my question xD 1 month ago asdasdasd
I used to use Linset for Evil Twins
Nice, how well did that work?
This is for advanced not for beginners... at least you should have shown how to install the Evil Twin!
How to access internet when government stops the internet or shut downs .
It depends on how they do it, if it's a DNS level block using a DNS like 1.1.1.1 can fix it.
if your running windows pull up command prompt run 'netstat' or ipconfig /all ...look what your dns is doing check it matches up with your router settings and that isn't changed also...click 'start' bring up command prompt very simple ...from your comment i highly doubt the government is shutting down your connection..could be a dodgy line...alot of attenuation...who knows? if in doubt run a vpn ( i always do to protect myself) hard to say with the information you have provided , alot of DNS hijacking going on lately here in my country ...highly doubt your on the governments 'watch' list as you havent explained anything or nothing to go on...look into a dual boot os and run Linux best thing i ever done many years ago ...
90% positive the government won't shut down your connection...it's how they monitor what you do what you search etc etc your personal movements and search history is money ($) to them it's all sold ...it could be anything from malware, a browser hijacker attempting to MIM , or someone simply 'hogging' the bandwith ...to many variables
also run who is...check your public ip address, check the dns matches up with your router , check your router logs, sometimes they will give off red flags to dns hijacking..but from what you've said i've got a funny feeling you'r on a copper line (RIM) and your older brother is watching naughty videos! ;)
Norton blocked access to your website claiming malicious content?
Our website? null-byte.wonderhowto.com
Nullbyte has malicious code on that website. Visit at your own risk.
Hacking the hackers 😮
What's the end goal
But what is the purpose of technique
Hi bro, I tried this on my own wifi. Everything works fine except that the Evil twin of my wifi network doesn't appear. there is only one network (the original one) and it requires password and then disconnects. I can't go further then that.
I need your help!
stay curious and try again and again
@@erfan9749
Yeah,
One way to prevent this type of attack, is to name your SSID the same as your password. #TechnicallyTrue
Sinopulence yeah but usually wifi passwords are complex passwords and not simple ones
You can't be hacked if it's an open network
@@NullByteWHT exactly! Haha
Null Byte well cant people still log passwords through network traffic, or redirect your webpage requests?
@@OhMyJawsh yeh, the point is, you can't have the password hacked if it's public info. MITM just becomes easier. It's not a suggestion, just a joke. Please don't put your password in the SSID. Unless you want to be breached.
I'm surprised that the website was in HTTP and not in HTTPS
i want test this evil twin ap attack on my wifi and i purchased a wifi adapter and i installed airgeddon in kali linux and when i start the attack everything goes well except the one saying that nl80211:could not configure driver mode
hostap initialzation failed
hostap-DISABLED
wlan0 wasn't started .
please help me.
thanks in advance
It sounds like there's a driver that you need to install for your computer.
@@NullByteWHT can you please suggest sir
Hi, when I try do this, 2 issues are blocking me.
1. deauth is not working
2. even if I am able to see the twin in my wifi list. not able to connect to it.
if I try deauth manually by using aireplay its working fine.
am using kali latest version in virtual box and network card is alfa AWUS036NEH. can you please help.
That sounds like an issue with Airgeddon you should contact the devs and start an issue on GitHub.
I don't understand why it needs to be a captive portal they put password into, and not just the normal password prompt, but i guess there is a good reason
Technically it's possible to set the fake AP's password to say 12345678, but the device on the user's side will not prompt to enter the correct password, it would just display unable to connect. The captive postal password screen looks more legit as many people have used it at airports and other places. But whoever is that dumb to type in their password into a captive portal prompt on their home/work router which obviously is not supposed to be there, deserves to the hacked. lmfao!!
You should do a video of how not to blink :) !!!!
I was thinking of something like that for the April 1st video
Null Byte THAT WOULD BE AWESOME THX FOR YOUR SUPPORT BRO THIS SHIT IS AWESOME
Se mira que explica muy bien lo malo es que yo no entiendo nd sería mejor q pusiera letras de lo que dice en español
Lo sentimos, vamos a trabajar para obtener voz en español
Shokran Bro🤗
you are mind blowinggg bosss❤❤❤
Anas kureshi thanks for watching! Tell all of your friends about us! 😃
Kody was great on these videos. The new owners are idiots for not continuing to pay Kody.
plz make a tutorial to dual boot windows and kali.
Good idea roman, I've added it to the list of video ideas.
Can you please help me with my desktop. It has been encrypted by some external source and my old photographs, which was the only way to remember and live my childhood days, are in an encrypted form.
Please help me to decrypt it.
Any more details? is it ransomware?
ouch sounds like wannacry or some ransomware....there's decryptors out there but it's touch and go ..hate to say it ...your pretty much buggered unless you pay the ransom or can somehow get that decryptor hash key (extremely hard) ...you've given 0 information on what ransomware (if it is) ..i personally not long ago downloaded all my facebook profile , deleted facebook ( they track and market/sell everything you do) and made external backups to a cloud, USB stick, DVD , and oldschool external HDD ..hate to say it ya kindof stuffed unless you know how to decrypt certain hash keys ..Some of these new ransomwares hide in the memory values ...you havent said what it is ..more info needed
That's really cool
Thanks
A comment for your engagement =P
Null Byte engaged
I'd rather redirect them to a page with a full width & height with some non-existent domain name like "a.b.cd" and that sure will trigger the
"This site can’t be reached"
error, and just show wifi password prompt and make it look like the prompt of the os.
so if the target is using windows then the page will look like i.imgur.com/PXJeiag.png
That could work too.
Sir I have tried so many ways but the router didn't provide me handshake files and also in the monitor mode station and all other columns didn't show any data after sending deauth packets through aireplay-ng.
Router name - Airtel zerotouch 5g broadband
Sir help plzzz
Please help 🙏🙏🙏🙏🙏😭😭😭
as I am saying you are the best
muhammad Azad thank you for watching! Tell all of your friends about us! 😃
Of course I do.😍