Hi and welcome back in this video, I'm going to teach you how to perform an evil twin attack using
an automated wireless hacking tool called Ergot.
And so first of all, you need to download the tool on your system by clicking Clone or download and
copy the GitHub link from here and then go to the terminal and target clone and paste the URL and use
it as to list all the files.
And now I have a new folder called Air Jordan, so I'll change directory to Air Jordan and to run the
tool type dot slash ergot, and that is h to start the tool.
This will take some time to check if all the necessary files are installed.
Now here it will ask you to select the interface and make sure you have your wireless interface in monitor
mode.
So I will use the second option Double and zero mom and here select Option seven Evil Twin Attacks menu
and use the last option Evil Twin App Attack with captive portal.
And press enter to scan all the wireless networks around you and use control plus to stop the scanning
process and now select the target by entering the number.
So I number one, which is airport Wi-Fi.
And here I will select the second option airplane attack to disconnect all the planes from the access
point and press enter.
Now, if you don't want to use your real Mac address type, yes or key, so here you need to provide
the pad for the WPA handshake.
If you have captured the handshake file, so in my case, I will use note to capture a new one now and
press enter.
And now that the authentication attack is running and it will automatically stop when the handshake
is captured.
And if you see congratulations on the screen, then it means you have successfully captured the four
way handshake.
Basically, this file will be used to check if the victim is typing the correct password in the captive
portal web page.
No presenter to use the default Pat for the foil, and he'll select the language for the captive portal
web page, and I will use the first option English and press enter.
And I know the attack is running.
So let's should the victim machine and connect to the fake wireless network.
And you can see I've been automatically directed to the captive portal web page where I need to enter
the wireless network password if I want to get internet access.
So I would have let me in for five six, which is the correct password from my access point and click
Submit.
OK, now let's go back to the caller machine and hear on the control window, you can see I've successfully
captured the password.
So thanks for watching and I'll see you next time.