Friday

EASY FAKE ACCESS POINT SETUP

Can you spot the difference? One of the hotspot login pages below is a fake. It was broadcast from a fake access point purposely setup to lured in visitors and then intercept their user name and password! So beware.

Foto A: A Real wireless hotspot login page


Foto B: A Fake wireless hotspot login page


Video 1: Fake AP in action


Want to turn your normal and innocent looking wifi adapter into a fake access point and able to do EXACTLY as above video? Just follow the 3 simple step.

Requirement:
-------------------

#1. Backtrack4

#2. Your pc must already be connected to internet service via item #4

#3. 1 usb wifi adapter (mine is ralink, yours might differ). This wifi adapter will be transformed into a fake access point where all the victims will be connected to. Here is where DNS poisoning, 'Secure site' SSL sniffing, email and instant messaging monitoring is being done. You will be able to see exactly what the victim saw on their pc screen, remotely.

#4. 1 usb or internal wifi adapter (mine is centrino, yours might differ). This wifi adapter will be connected to the internet (item #2) and forward all internet traffic to item #3.

#5. fakeap.sh and dhcpd script software

Step 1. Download fakeap.sh and dhcpd.conf onto the Bt4 desktop. This is a trial version.

Step 2. Open konsole and type in 'chmod {leave a space} +x {leave a space} /root/fakeap.sh' then

Step 3. type in '/root/fakeap.sh' and follow instruction as per Picture A to G below.

*Key in all command without the quote notation.

Picture A: Download 'fakeap.sh' and 'dhcpd.conf' onto bt4 desktop


Picture B: Execute 'fakeap.sh' (trial version) script


Picture C: Unplug wifi adapter to be used as fakeap (mine is 'ralink', yours might differ)


Picture D: Specify interface for internet connection (mine is 'eth1', yours might differ)


Picture E: Specify IP gateway (mine is '200.70.1.1', yours might differ)


Picture F: Configure 'dhcpd.conf' and plugin wifi adapter to be used as fakeap


Picture G: 'fakeap' wifi network is now successfully launched.


Your wifi adapter is now turned into a fake access point. Your 'fakeap' ssid will be visible by other pc in the vicinity. Unsuspecting visitors who connected to your 'fakeap' will be able to surf the internet as normal, just like what you saw in above video.

We will then do a DOS attack to block all other real ap's broadcast signal so that surfers in the vicinity can only connect to our network. Mid way into their individual internet session (via our fakeap) the script will pop-up an alert message that says "Network disconnected. Re enter WPA key to establish connection." and then prompt a login box asking for WPA key, or popup what ever fake login page you desire. Once victim fall into this fake web page, they will unable to escape from it and entrapped in a loop cycle.



With fakeap.sh (full version) script you will also have additional option to remotely monitor visitor's traffic and inject DNS poison to their internet session to divert them to a fake login web page, if you wish. This attack is only limited by your imagination.

Some people might say this method is more like 'social engineering' than macho 'hacking'. Well, call it what ever you want, to me, the end justified the mean. If i can get 50% success rate using this method, i am a happy man. BTW, what is the success rate if you use pure brute force ? Well, not that good if you ask me.



HOW TO GET FAKEAP FULL VERSION
==============================

You can get your personalized fakeap full version code by sending email to us using the following format (click to see the request code).