Pwnagotchi: Evil Twin AP

[myasn1k]

It would be awesome to implement a plugin to perform automatic evil twin attack!
Surely another wireless interface would be required, but with a cheap wifi adapter the problem should be solved.
Maybe the plugin could implement a timer that checks if connected to the data port there is a wireless interface (or maybe it could be done with interrupts?).
The only drawbacks I found about this solution is that the attack is based in part on social engineering, so it could not work.

Thanks for the attention and thanks a lot to the dev-team for this beautiful project!

[PeterAlfonsLoch]

I advise against it, to be put in this repo. the mere exisance of that code on a device is illegal in many countries. Now If you or someone want's to wite it as a plugin then it is upon the one installing it to check if it is legal or not. The point of wanting to show how insecure something is, is very different from actually wanting to steal passwords. Even from an ethical viewpoint i'd advice against it to be put in this repo aka in the RC

Telling people "it kicks people from the w-lan" has been received in a laughing way. but now imagin telling people it steals passwords.....

[myasn1k]

Thanks a lot for the reply! I completely understand what you're saying and you're right; I thought it would have been useful in context like Red teaming (maybe? I'm not an expert) but as you said it could be weaponized easily and used for purposes that may not be so legal or ethical.. So sorry to not have thought about this in advance!

[PeterAlfonsLoch]

I am just one of many users i am not part of the deciding force but if someone would create a seperate git for a plugin of that kind then yes why not. I just wanted to give my 2 cents about it. i think that the project itself should remain as legal as possible. For now it is, depending on the country, more of a grey area.

But your idea could be possible.

[gompa]

isn't the whole deauth part "illegal" ?
considering : https://www.fcc.gov/document/warning-wi-fi-blocking-prohibited
so at least in the usa,but there are probably more countries with similar laws

[myasn1k]

Little update.
I thought about the whole idea; implementing an evil twin attack that automatically redirects new connected users to a phishing webpage to steal wifi credentials is a bit "crude".
Not just by the legal point of view that, as @gompa points to, maybe isn't so relevant; but in the sense that every AP is different from the others, so the attacker would have to craft a web page ad-hock for every AP (and that's not so smart because the automatic part of the plugin scope in this way just blows up).
So the solutions are:

• Best solution: make a plugin that fully implements evil twin and write also a script to find infos about the attacked AP just by knowing the SSID (something like googling infos and images connected with the SSID)
  
  
  
  • Comment: not so cool, won't work from my point of view
  
  
• Something like: create a plugin that implements EAPHammer.
  
  
  
  • Comment: yes, this isn't the best solution (it'll just work with enterprise wifi networks), but at least is fully automatable (i hope..).
  
  

Tell me what you think, now I'm studying for university exams so I won't work on this til maybe march/april.
I hope that this discussion will make someone think about this opportunity and work about it :)

[bruvv]

https://github.com/evilsocket/pwnagotchi/pull/757 it's here ;)

[myasn1k]

@bruvv exactly what I was searching for! :)