Hi and welcome back in this lesson, you will learn how to steal the login information from victims
using a malicious wi fi captive portal with social media connectivity options, and to do that, I'm
going to use rogue Wi-Fi script.
So let's us on the screen by scrolling up and clicking on or download and copy the guitar, blink and
go to the terminal and Typekit Chrome and paste the URL.
What's done with that change directly to the Skip folder?
And now you need to copy all the files from this directory to the Apache Web server location by typing
CB Dash R and pull the Star Wild Card.
This star represents all fires and then type the location, which is slash versus WW slash HDMI or Key
Notice Change Directorate to slash what slash WW slash HDMI and see if I have successfully copied the
files and only the content of these directly using the L.
S Command, and you can see I have all the files.
OK, so at this point, to carry on the script by typing dot slash white fi that is h and put the wireless
interface double wlan0 and the second interface which provides you with internet access.
And in my case, I have internet access from age zero.
So the second interface will be used to give internet access to the users when they have submitted the
login credentials.
And lastly, take the access point name and I will use free Wi-Fi and press enter and no access point
is run.
So let's switch the Windows machine and connect to free Wi-Fi and can be redirected to this nice web
logging interface where I need to log in using my social media account in order to gain internet access.
So for this example, I would select Facebook and type jack or gmail.com for the email and let me in
for the password and click login.
No, the script is written to fail in the first attempt because most of the time users will try to enter
fake information.
So let's say the victim would try the second attempt and maybe he would use the real password.
So, for example, this time he will use just let me in four or five six for the password and try to
login again and know the victim will have access to the internet.
Or, OK, so let's go back to the machine and stop the access point using control policy and see if
I have managed to capture the login information which should be saved in a text file called passwords.
So at least the files using L.S. and here is the password that you file.
So I'll open the file using nano and the file name, and you can see the first and the second password.
The email address and social network Facebook.
So that's it for now.
Thanks for watching, and I will see you next time.