OK.
So welcome back in this video, I'm going to teach you how to create a fake captive portal and steal
the login information using social engineering.
So let's get started.
And first off, I'm going to click on the wireless icon from the taskbar and you can see I'm connected
to airport free Wi-Fi.
Now, let's see.
For example, when you connect to this wireless network, you are being redirected to this login page.
So let's pretend this is the original captive portal page, which is displayed to the users when they
try to connect to the airport free Wi-Fi or key known locally machine and see how to create an access
point with the same login page and similar name.
And first, I'm going to open host APD config file using nano and the file name, and change the name
to airport free Wi-Fi version to save the file and then start the access point using host APD and put
the location for the configuration file.
And I'm also going to add Dash B option.
OK, so the next thing is to create the exact same login page as the original one.
So first, I will change directory to slash four slash W slash HMO, and here I will type HD track.
And now I need to put the link for the website, which I want to clone.
So I'll go back to the Windows machine and copy the login page link and pasted here and press enter.
This process may take some time, depending on how big is the website or key.
So the next step is to capture the network traffic from the access point.
And to do that, I will Type D Shark and said the interface to double Newlines Zero and Dash W the fire
name and in my case, I will use to capture a P and press enter or key note.
At this point, you can use the authentication back to kick all the users from the original access point
and force them to connect to your fake access point.
So to do that, I will open a new tab and type URL dump and G W learn one more.
This W Len one is another wireless adapter in monitor mode, which I have attached to the virtual machine
and press enter.
And now you need to type airplay and G does zero zero Dash eight and copy the Mac address from the original
Access Point and then paste it here and put the wireless interface and press enter.
And no, the task is running.
So let's go to the victim machine and click on the wireless icon and you can see I'm no longer connected
to the network because Delta indication attack is disconnecting all the users from the network.
So the victim will think there is something wrong with the network.
And he may try to connect to the version too.
And he will be redirected to the fake login page, which looks exactly as the original one.
So let's say he will use Jack for the username and let me in for the password and tries to sign in.
OK, now let's go to the Cali machine and stop the capturing process using control plus c and to find
the login information, I'm going to type Disney for Dash B and the capture file name and press enter
and you can see the username jack and the password.
Let me in.
So thanks for watching and I will show you next time.