76 lines
4.2 KiB
Markdown
76 lines
4.2 KiB
Markdown
|
|
|
|
# Fluxion is the future of MITM WPA attacks
|
|
Fluxion is a security auditing and social-engineering research tool. It is a remake of linset by vk496 with (hopefully) less bugs and more functionality. The script attempts to retrieve the WPA/WPA2 key from a target access point by means of a social engineering (phising) attack. It's compatible with the latest release of Kali (rolling). Fluxion's attacks' setup is mostly manual, but experimental auto-mode handles some of the attacks' setup parameters. Read the [FAQ](https://github.com/FluxionNetwork/fluxion/wiki/FAQ) before requesting issues.
|
|
|
|
## Router login page
|
|
Share your own router page with a simple script
|
|
```
|
|
cd scripts
|
|
sudo sh router.sh
|
|
```
|
|
|
|
## Installation
|
|
```
|
|
git clone --recursive https://github.com/FluxionNetwork/fluxion.git # Download the latest revision
|
|
cd fluxion # Switch to tool's directory
|
|
./fluxion.sh # Run fluxion (missing dependencies will be auto-installed)
|
|
```
|
|
|
|
## :white_check_mark: Included dependency versions
|
|
1. Aircrack : 1:1.2-0~rc4-0parrot0
|
|
2. Lighttpd : 1.439-1
|
|
3. Hostapd : 1:2.3-2.3 _If you want to compare this type `dpkg -l | grep "name"`_
|
|
|
|
## :scroll: Changelog
|
|
Fluxion gets weekly updates with new features, improvements, and bugfixes.
|
|
Be sure to check out the [changelog here](https://github.com/FluxionNetwork/fluxion/commits/master).
|
|
|
|
## :octocat: How to contribute
|
|
All contributions are welcome! Code, documentation, graphics, or even design suggestions are welcome; use GitHub to its fullest. Submit pull requests, contribute tutorials or other wiki content -- whatever you have to offer, it'll be appreciated!
|
|
|
|
## :book: How it works
|
|
* Scan for a target wireless network.
|
|
* Launch the `Handshake Snooper` attack.
|
|
* Capture a handshake (necessary for password verification).
|
|
* Launch `Captive Portal` attack.
|
|
* Spawns a rogue (fake) AP, imitating the original access point.
|
|
* Spawns a DNS server, redirecting all requests to the attacker's host running the captive portal.
|
|
* Spawns a web server, serving the captive portal which prompts users for their WPA/WPA2 key.
|
|
* Spawns a jammer, deauthenticating all clients from original AP and lureing them to the rogue AP.
|
|
* All authentication attempts at the captive portal are checked against the handshake file captured earlier.
|
|
* The attack will automatically terminate once a correct key has been submitted.
|
|
* The key will be logged and clients will be allowed to reconnect to the target access point.
|
|
|
|
* For a guide to the `Captive Portal` attack, read the [Captive Portal attack guide](https://github.com/FluxionNetwork/fluxion/wiki/Captive-Portal-Attack)
|
|
|
|
## :heavy_exclamation_mark: Requirements
|
|
|
|
A Linux-based operating system. We recommend Kali Linux 2 or Kali rolling. Kali 2 & rolling support the latest aircrack-ng versions. An external wifi card is recommended.
|
|
|
|
## Related work
|
|
|
|
For development I use vim and tmux. Here are my [dotfiles](https://github.com/deltaxflux/takumi/)
|
|
## :octocat: Credits
|
|
1. l3op - contributor
|
|
2. dlinkproto - contributor
|
|
3. vk496 - developer of linset
|
|
4. Derv82 - @Wifite/2
|
|
5. Princeofguilty - @webpages and @buteforce
|
|
6. Photos for wiki @http://www.kalitutorials.net
|
|
7. Ons Ali @wallpaper
|
|
8. PappleTec @sites
|
|
9. MPX4132 - Fluxion V3
|
|
|
|
## Disclaimer
|
|
* Authors do not own the logos under the `/attacks/Captive Portal/sites/` directory. Copyright Disclaimer Under Section 107 of the Copyright Act 1976, allowance is made for "fair use" for purposes such as criticism, comment, news reporting, teaching, scholarship, and research.
|
|
|
|
* The usage of Fluxion for attacking infrastructures without prior mutual consent could be considered an illegal activity, and is highly discouraged by its authors/developers. It is the end user's responsibility to obey all applicable local, state and federal laws. Authors assume no liability and are not responsible for any misuse or damage caused by this program.
|
|
|
|
## Note
|
|
* Beware of sites pretending to be related with the Fluxion Project. These may be delivering malware.
|
|
|
|
* Fluxion **DOES NOT WORK** on Linux Subsystem For Windows 10, because the subsystem doesn't allow access to network interfaces. Any Issue regarding the same would be **Closed Immediately**
|
|
|
|
|