|
"Wifiphisher" is a security tool that mounts fast automated phishing attacks against WPA networks in order to obtain the secret passphrase. It is a social engineering attack that unlike other methods it does not include any bruteforcing. It is an easy way for obtaining WPA credentials.〔AU-KBC Research centre, Madras Institute of Technology, Anna University. (【引用サイトリンク】first1=Chakkaravarthy )〕 〔Veltech Research & Development, Veltech University. 〕 == Scenario == WiFiPhisher tool uses "Evil Twin" attack scenario. Same as Evil Twin, the tool first creates a phony wireless Access Point (AP) masquerade itself as the legitimate WiFi AP. It then directs a denial of service (DoS) attack against the legitimate WiFi access point, or creates RF interference around it that disconnects wireless users of the connection and prompts users to inspect available networks. Once disconnected from the legitimate WiFi access point, the tool then force offline computers and devices to automatically reconnects to the evil twin, allowing the hacker to intercept all the traffic to that device. The technique is also known as AP Phishing, WiFi Phishing, Hotspotter, or Honeypot AP. These kind of attacks make use of phony access points with faked login pages to capture user's WiFi credentials, credit card numbers, launch man-in-the-middle attacks, or infect wireless hosts. As soon as the victim requests any web page from the internet, WifiPhisher tool will serve the victim a realistic fake router configuration looking page that will ask for WPA password confirmation due to a router firmware upgrade. The tool, thus, could be used by hackers and cybercriminals to generate further phishing and man-in-the-middle attacks against connected users. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Wifiphisher」の詳細全文を読む スポンサード リンク
|