Evil Twin attack using Wifiphisher
One of the main issues that a majority of companies face is rogue APs within the range of their offices with the same name as their Wi-Fi network. In this section, we explore Wifiphisher, a rogue AP framework to conduct red team engagements or Wi-Fi penetration testing. Typically, we use this tool to perform effective MiTM attacks against clients that are associated with a Wi-Fi network.
This tool is not installed by default in Kali, hence attackers should install this tool by running sudo apt install wifiphisher in the terminal.
The following steps are involved in successfully performing an Evil Twin attack using Wifiphisher:
- Once Wifiphisher is installed, launch the tool by running
sudo wifiphisherin the terminal, which should bring up the following screen with the list of available wireless networks:
Figure 6.20: Wifiphisher identifying the list of wireless networks
- Select the right ESSID/BSSID...
