So a variant of the fake AP attack is when the attacker mimics the settings of a legitimate app to create
a virtually identical app called an evil twin.
Appropriately named, I'm sure, so the yes side of both the legitimate AP and the fake AP is exactly
the same.
So now in this lecture, we're going to create an evil twin access point by giving the IP address to
the client that will attempt to authenticate to the access point and then in this way will see the network
traffic of the client.
And actually, we're going to perform a man in the middle attack as well.
So let's start her up, go to Kelli, open up a terminal screen switch usat route with the command.
Pseudolus, you dash check the mode of your wireless adapters interface.
If it's in management, change it with the air and start w land zero command.
And will kill the other wireless interfaces.
All right, so now create a fake access point with air base energy.
This time, I'll create a fake access point with open authentication to authenticate without a key.
So if that will open a new terminal.
Now install DNS mask that provides domain name system or DNS forwarding.
Now, as you should already know, DNS is responsible for resolving name queries, which allows us to
serve the World Wide Web, I don't know, is anybody still call it a dub dub dub or the W w w?
But anyway, that's how we visit websites, right?
So the DNS MASP program assists in providing DHP clients access to the Internet just by forwarding their
DNS queries to actual DNS servers or recursive resolvers of our choosing.
All right, so will install DNS mask with and install DNS mask.
Of course, I already have it.
The gas mask comes with its own DNS, Mazda's config files stored in the cell ACTC slash folder.
And we can view this configuration file just by executing the Nanosolar slash DNS mask.
So we need to add some parameters in this config file.
Right, the parameters that I wrote here into your own config file.
And then use a keyboard, command and control as to save and quit with control ex.
So base energy sets the fake access point on interface at zero, so we must bring this interface up,
configure it, enable IP forwarding as well as a few other parameters.
So first will run if config eight zero up.
So brings up the eight zero interface.
Secondly, if config at zero 10 zero zero one net Marzook 255 255 255 zero, and that sets the eight
zero interface I p address as 10 zero zero one.
And then the sub mascot's last 24.
Root and dash net 10 zero zero zero net Marzook 255 255 255 zero, GW 10 zero zero one.
And then that will create a static root in our routing tables so that any traffic from our clients will
be forwarded to the real gateway at 10 dot zero zero one, which is actually part of the 10 zero zero
zero 24 network.
So IP tables dash p forward xcept.
Creates a policy to accept forwarding in the chain target.
This makes our Linux machine act like a router.
IP tables, dashty nat'l.
Dash a post routing.
Dash o w land zero man dash j masquerade.
That allows us to rout outbound traffic without disrupting the normal flow of traffic on the network
masquerade option kind of acts like a source, Nat.
Echo once again, prognosis slash net, slash IPV for slash IPI forward and Abels IP forwarding, the
one just enables the IP forwarding while a zero will disable it.
All right, so we'll see these commands to a text file, and when you create a fake access point in
a Web cracking section.
We'll use them again.
All right, so we're ready now, so we will run DNA mask using the config file.
So execute DNS, Maska Dash CS etsi dash DNS Mascotte conf dash de.
And then we'll connect to this access point with a phone.
So, see, when I connect to the fake access point, logs appear on the screen and then DNS mask gives
an IP address of the device.
OK, so I actually don't know why right now, but it didn't give the IP address to Zao me, so I'm going
to just try and connect with the iPhone.
OK, so as you can see, I am able to monitor iPhone traffic.