[Autogenerated] all right.
Now the insulation is done,
creating an access point in setting up a fake captive.
Poor Oh is really easy.
As I mentioned,
wife find Pumping is a two capable within several worlds attacks in
here We're focusing the fake captive Porter's attack,
which, in my opinion, is one of the most effective ways of getting credentials.
First, let's go to the setting stab on the left side.
Minya.
In year, we can configure the settings off the access point.
For example,
I'll change the name of my word is no trick to global Mantex Cooperate,
which is similar.
Offer victim WiFi name If you want,
you can also change the channel in which of the natural you'll run next.
We can also select the WiFi adapter that will use.
In my case, I only have this Dublin zero doctor,
which is supports monitor mode in the bottom of the screen.
We can set up the security of this network,
for example,
who could enable W P two authentication and put a password for this network.
But in my case,
I will leave this without a dedication to increase the
chances of someone connected to it.
Cool despite is done.
Now we have to enable the captive porter plugging for that.
Let's go to the menu plug ins in there.
You see that we have tons of programs available.
For example, we could SSL is tripping or several other attacks.
But again, in my case, I'm interesting.
The captive Porter.
So I was selected from the list.
No, the less step is going to the captive portal section on the left side.
Minya In here, we can select which same plate for captive porter we want.
And this is basically set of HTML pages the simulated
authentication screen off a captive porter.
I could select any of item on this list, but in my case, I was selected.
They're clogging, which is a dark theme.
There's Indication Page, actually, Quick pose here.
If you want to customize your authentication screen,
it can easily do that by going to the folder where we have the wife I've
permitting and then going to the folder plug ins in there.
We can go to the folder captive Porter And then here
we entering the templates forger.
And here we have our the captive porter templates nettle.
So then we enter in the folder of the template.
Do you want to add it?
And here we have two folders.
One is called Static, which contains the CSS and JavaScript of the page,
and the other one is called Template, which contains the dedication page,
which is this Logan dot html.
In here,
he added this HMO file to make it look like the company you're attacking,
for example, in kidding, said their logo,
or even change the text to some more convincing.
Perfect.
Now let's go back to the wife.
I'm bunking here.
We already configured.
The settings were enabled a captive porter plugging and you already
selected a template they're gonna be using for authentication.
Page I will have to do is clicking the start button.
Perfect.
Now WiFi pumpkin is launching tones of stairs in the background,
and you can see this in this Progress bar.
Awesome.
No, or access points is ready to be used as you can see my phone.
I have not global Mantex corporate WiFi.
Once I connect to it, it asked me, still looking into this network.
If we go to the monitor activity tab,
you see request year and here there's some get requests from my phone.
Once the dedication page is loaded on my phone, we type the credentials.
Once I submit the credentials you say post request here and
is showing that the user posted some data.
Now we can go to the credential monitor tab,
and you see that credentials that I typed on my phone are right here.
You note that he used a percentage 40 instead of the at symbol,
and that's because it isn't asking courted.
So instead of showing special characters,
you show the asking cold, and that's it.
If another users have meets another credential,
Your show here in this ring pretty easy,
right?
In just few minutes, we set up a fake captive poor Oh,
that is able to harvest to use their credentials after it done.
If you want to stop the access point,
all we have to do is click on the stop button