Latest method for hacking WPA/WPA2 security – WIFIPHISHER

Latest method for hacking WPA/WPA2 security – WIFIPHISHER:

http://newsofcime.blogspot.com/

There ar several hacking tools on the market on the internet which will hack a secure Wi-Fi network, however this tool revealed by George Chatzisofroniou automates multiple Wi-Fi hacking techniques that build it slightly completely different from others. George Chatzisofroniou revealed this new methodology for Hacking WPA/WPA2 Security employing a WiFi social engineering tool designed to steal credentials from users of secure wireless networks.

The administrator at the University of Greece developed the WiFiPhisher tool that is employed to get and replicate WPA-protected networks, sans password.The tool, will be downloaded from GitHub here and works by manufacturing variety of deauthorisation packets at a legitimate access purpose jamming it and prompting users to examine on the market networks.Users can see the malicious network move as their trustworthy  access purpose.

How It Works:

Wifiphisher is a security tool that mounts fast automated phishing attacks against WPA networks in order to obtain the secret passphrase. It is a social engineering attack that unlike other methods it does not include any brute forcing. It is an easy way for obtaining WPA credentials.

Wifiphisher works on Kali Linux and is licensed under the MIT license.

From the victim’s perspective, the attack makes use in three phases:

1.) Victim is being deauthenticated from their access point. Wifiphisher continuously jams all of the target access point’s wifi devices within range by sending deauth packets to the client from the access point, to the access point from the client, and to the broadcast address as well.

2.) Victim joins a rogue access point. Wifiphisher sniffs the area and copies the target access point’s settings. It then creates a rogue wireless access point that is modeled on the target. It also sets up a NAT/DHCP server and forwards the right ports. Consequently, because of the jamming, clients will start connecting to the rogue access point. After this phase, the victim is MiTMed.
3.) Victim is being served a realistic router config-looking page. wifiphisher employs a minimal web server that responds to HTTP & HTTPS requests. As soon as the victim requests a page from the Internet, wifiphisher will respond with a realistic fake page that asks for WPA password confirmation due to a router firmware upgrade.