An evil twin is a fraudulent Wi-Fi access point that appears to be legitimate but is set up to eavesdrop on wireless communications.The evil twin is the wireless LAN equivalent of the phishing scam.
This type of attack may be used to steal the passwords of unsuspecting users, either by monitoring their connections or by phishing, which involves setting up a fraudulent web site and luring people there.
- Scan a WLAN in the environment for a minute and view the various networks discovered
- Selection of the network on which to carry out the attack
- Presenting clients of the network on which the attack is being made.
- Selecting a victim and performing an Evil-Twin attack.
Evil-Twin attack includes:
Disconnecting the victim from the existing network, uploading the malicious network (the evil twin) and activating CaptivePortal, connecting the victim to the malicious network and its activities, obtaining the information that is the purpose of the attack.
In addition, there is a defense tool that detects the existence of an attack on the victim and prevents the success of the attack.
- Two wireless network adapters (One for attack and the other for setup fake ap).
- Linux enviorment (kali / Ubunto).
- Install python3 and libraries: dnsmasq, hostapd, scapy.
- Copy html file from project to path in your OS: /var/www
- Choose file in your computer and run in terminal: "git clone https://github.com/LiorAtiya/Evil-Twin-Project.git"
- run: "python3 main.py"
- Set your interfaces (network adapters).
- Choose 1 to launch the Evil Twin attack or choose 2 to activate the defense mode.