Quietlife Posted December 4, 2008 Share Posted December 4, 2008 Just an idea to go with the whole SSL spoofing / pineapple concept. Why not add a deceptive captive portal page purporting to be a security update from "insert social engineering trick here" requiring the noobs to accept a cert or even a new cert authority before they are given access ? Quote Link to comment Share on other sites More sharing options...
post_break Posted December 4, 2008 Share Posted December 4, 2008 Wifizoo can do this all behind the scenes without the targets knowing. Darren mentioned in his video that my method would require the user to accept a bogus cert but that is incorrect in my testing. Checkout wifizoo for your SSL needs. Quote Link to comment Share on other sites More sharing options...
Quietlife Posted December 4, 2008 Author Share Posted December 4, 2008 RIC : http://sunbeltblog.blogspot.com/2007/10/se...ndees-fall.html Quote Link to comment Share on other sites More sharing options...
post_break Posted December 4, 2008 Share Posted December 4, 2008 I dont understand your response. What are you trying to say with that link? Quote Link to comment Share on other sites More sharing options...
Quietlife Posted December 4, 2008 Author Share Posted December 4, 2008 as an example of it being possible and acknowledging my noobness Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.