use fakeAP_pwn script and write your own index.html to replace the index.html in var/www/fakeAP directory.
When a client connects to the fakeAP the client gets your new index page instead of the existing update page.
Use your imagination as what to do next!


