(12-21-2018, 11:03 AM)VilePyromancer Wrote:

Fluxion Wifi Hacker (Evil Twin Attack)

REQUIREMENTS

Kali Linux USB

Compatible Interface Device

WPA2/PSK Test Connection

Before you go further into the tutorial and waste your time let's check to see if your Network Interface Device is compatible of packet injection.

Open up a terminal and enter the following command

Code:

lspci

Your output should look like this


The second to the last line is where it tells me what Network Interface Device I have.

Ethernet controller: Realtek Semiconductor Co., Ltd. RTL8101/2/6E PCI Express Fast/Gigabit Ethernet controller (rev 07)
02:00.0 Network controller: Intel Corporation Wireless 3165 (rev 81)

Google your adapter to see if it is compatible with packet injection. If it is compatible then you are capable of hacking wifi and can proceed with the tutorial.

The next thing we want to do is to download the Fluxion tool for Kali LInux. You can easily do this by typing the following into a terminal

Code:

git clone https://github.com/FluxionNetwork/fluxion.git

If git clone does not work for you then go to the link provided above and click download zip. After that open a terminal and navigate to downloads

Code:

cd Downloads

Code:

ls

Code:

cd fluxion-master

Code:

ls

Then make the program executable by typing the following (Usually Fluxion is already an executable if not follow this step)

Code:

chmod +x fluxion.sh

The whole process should look like this in a terminal


Then type the following to open the program

Code:

./fluxion.sh

The program should look like this

Make Sure Monitor Mode is Enabled and Processes are Killed!

If you don't you could run into unforeseen and unexpected problems!

Minimize your Fluxion program and open up another terminal and type the following

Code:

airmon-ng check wlan0

Then kill the processes like this

Code:

kill 747

Just replace the 747 with your process #

Then run

Code:

airmon-ng start wlan0

And after that run

Code:

iwconfig

Iwconfig command will show that your Network Adapter is in monitor mode and also shows my interface which is wlan0mon

The commands above should look like this in a terminal window


Once your wireless adapter is in monitor mode you can go back to your Fluxion program

Once you have the Fluxion Tool back open choose the Handshake Snopper option by typing the number 2


Then choose all channels 2.4GHz and 5GHz or choose specific channels if you already know what channel the AP is on. After you choose this option the Fluxion Scanner will appear and scan for nearby AP's. Let it scan for about 20 or 30 seconds and then click Ctrl+C to close it out and it will look like this


I am using my own internet connection for testing purposes. My internet is Lacey/Storm so I choose 11 and proceed. The next window we come to we want to choose option 2 which is aireplay-ng deauthentication which allows us to get a handshake from the AP allowing us to create the evil twin.


The next step is to choose pyrit verification by pressing 1 in the next window


Then choose every 30 seconds in the next window


Then choose Synchronously in the next window


After that Fluxion will run some deauth attacks against the AP to try to get it to disconnect and reconnect creating the handshake we need. Once captured the handshake will be in the top right corner of the Handshake Capture Window.


After it captures the handshake let it keep running until 3 of the windows close out and this is the only window you see. When you see this window just click Ctrl+C like we did before to close it out.


Once you close out that window it will take you back to the Fluxion Tool and will ask if you want to exit or perform another attack. Choose select another attack in this window so that we can create the Evil Twin AP we need to get the password.


Select Captive Portal so we can continue to create the Evil Twin AP


Fluxion will ask you if you want to continue targeting the AP that we have been targeting press y to continue.


Then Fluxion will ask you to choose your Interface


In the next window choose Rouge AP - hostpad


The next window Fluxion will ask if you want to use the hash found (the handshake you captured earlier) so type 1


In the next window choose Create an SSL Certificate


Then type 1 and choose the option disconnected in the next window


In the next window it will ask for your language. For me I choose 7 since my language is english.


After you choose your language Fluxion creates the Evil Twin Fake AP of the targeted Client... In other words there will be 2 of the same Lacey/Storm internet connections when you scan for internet. One is the real one which is secured by WPA2/PSK and one is the one I just created that has an open connection with no Security. Fluxion blocks me from connecting to my real secured network so that I cannot access the internet. Once I connect to the Fake AP it will ask me for my WPA2 key. After you choose your language the window will look like this


As soon as I click on the Fake AP Fluxion lets me know that someone has connected to it by telling me there is a client in the Fluxion AP Authenticator Window. That is how you know someone has connected to the AP but has not put in their credentials yet.


And then last but not least when someone does type in the WPA2/PSK password you will get a screen that looks like this


For security purposes I blacked my key out.

This hack probably wouldn't be very viable against an older couples home, but if there was teenagers in the house and you deauthed their phone most likely they will try to connect to the open AP and type in the password. Another thing that helps is while Fluxion is running and your not getting any hits with the clients try opening a new terminal and use aireplay-ng to send commands to deauth all the devices connected to the AP. There are plenty of tutorials on google for that. This tool is very useful when it is taking too long to  bruteforce or use a dictionary attack to get the password.

HAVING TROUBLE CONNECTING BACK TO WIFI AFTER YOU USE FLUXION?

If you are having trouble connecting back to your internet then take your device off monitor mode!

The commands are as follows

Code:

airmon-ng stop wlan0mon

If it is not in monitor mode but the wifi icon at the top right of the screen is gone then type the following command

Code:

service network-manager restart

You should be able to connect back to your internet after that!


I hope you guys enjoyed the tutorial. I tried to make it as BASIC as I possibly could for someone who doesn't have any knowledge of Kali Linux or Linux in general. If you have any questions please feel free to PM me or add me on Skype at live:handsomestud93

Thanks for viewing hope you guys enjoyed!

EDIT! This tutorial is supposed to be used for educational purposes only! I used my own system and my own network when making the tutorial.

EDIT 2: I just realized that this tutorial is already on here! I probably should have searched it before spending over an hour putting this together.. Oh well.. This is the newest version of Fluxion on the net that I am aware of. So at least this is an updated tutorial! Sorry!