Fake AP to collect WPA key ?
Hello,
since it's possible to make wifi cards act as and Access Point under Linux, I was thinking if it's possible to create a "fake" wireless network with the same essid as the victim's one and collect the password.
Is this possible ? In theory.
Thanks,
regards
Your theory is wrong. I'll let you think about it and see if you can figure out why.Originally Posted by Tex-Twil
A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.
Cos the password just doesn't go from the client to the server. And it is the AP who authenticates the client so the AP has to know the psk. And the authentication is mutual.
There ya go, now that wasn't hard was it?
A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.
no it wasn't. I would even qualify my question as "stupid"
cheers
There are no stupid questions, only stupid people asking them....
cheers
<looks to the idiot corner>
A third party security audit is the IT equivalent of a colonoscopy. It's long, intrusive, very uncomfortable, and when it's done, you'll have seen things you really didn't want to see, and you'll never forget that you've had one.
Would need physical access and even then if the PC does not have admin privileges you cannot obtain a saved key.
Μολὼν λαβέ - Great spirits encounter heavy opposition from mediocre minds.
as far as i know windows xp only needs essid to connect to the AP
and if the AP ESSID was in its preferred network setting it will automatically connect to the one with stronger signal
and that can be easily done with a 10-15 db antenna for the rausb0 card
----
i think it is possible ..but i don't know how
Posting Permissions
