Yamada Taro Posted April 12, 2012 Share Posted April 12, 2012 Hi everyone ! I only recently discovered Hak5 and i realy like it..lot`s of interesting stuff going on here ! I already Ordered an Mark IV and an rubberduyk and i am still not sure what i will learn from it but trying is the best teacher imho :) Can somebody tell me if it is possible to impersonate an Wifi (WPA/WPA2 encryption AES or TKIP) IF i know the credentials? I want to try it in my own wifi but don`t want to disable any encryption for Auth.. How can it be done ? Thanks for answer... (I crawled the Forum but could not find anything so far..i hope i dont ask a questions answered already a hundred times.. Quote Link to comment Share on other sites More sharing options...
redhook Posted April 12, 2012 Share Posted April 12, 2012 You don't need the credentials, the client will connect without needing them. Quote Link to comment Share on other sites More sharing options...
Yamada Taro Posted April 12, 2012 Author Share Posted April 12, 2012 (edited) You don't need the credentials, the client will connect without needing them. Yeah with OpenAuth and as long i have the Wifi NOT secured...but what if i want clients to connect to my "secured" honeypot-wifi instead of the REAL "secured" wifi.. I clearly need the SSID and Key ..and is it possible then? Edited April 12, 2012 by Yamada Taro Quote Link to comment Share on other sites More sharing options...
barry99705 Posted April 12, 2012 Share Posted April 12, 2012 No. Quote Link to comment Share on other sites More sharing options...
Yamada Taro Posted April 12, 2012 Author Share Posted April 12, 2012 No. Care to elaborate on this please :) Can it be possible in future? I wonder why it isn`t possible.. Thank your for enlightening me! Quote Link to comment Share on other sites More sharing options...
thestudent Posted April 12, 2012 Share Posted April 12, 2012 Care to elaborate on this please :) Can it be possible in future? I wonder why it isn`t possible.. Thank your for enlightening me! I am new to this also but have some ideas. For you more advanced users, would it be possible to code a "pseudo-authentication" for the Pineapple that would send a client that is secured by WPA or WEP or WPA2 a fake key and when the client responds with the encrypted password...Jasager...say, "yep, that's the right password". After the initial probe, according to 802.11, it is the router that initiates the connection by sending the client a key, the client then responds with a password that is encrypted and then the router will either accept or deny access depending on if the password is correct. Will this be possible? Quote Link to comment Share on other sites More sharing options...
Mr-Protocol Posted April 12, 2012 Share Posted April 12, 2012 If you are unfamiliar with RFCs, here is your chance to be introduced to them. http://tools.ietf.org/html/rfc4764 Quote Link to comment Share on other sites More sharing options...
Vulture Posted April 12, 2012 Share Posted April 12, 2012 If you are unfamiliar with RFCs, here is your chance to be introduced to them. http://tools.ietf.org/html/rfc4764 Great stuff Mr. Protocol thanx for posting Quote Link to comment Share on other sites More sharing options...
redhook Posted April 12, 2012 Share Posted April 12, 2012 Yeah with OpenAuth and as long i have the Wifi NOT secured...but what if i want clients to connect to my "secured" honeypot-wifi instead of the REAL "secured" wifi.. I clearly need the SSID and Key ..and is it possible then? You obviously do not understand how this device works. It tells every wireless client that it IS the AP they are looking for. And what would be the point of securing it, it is a honey-pot. If you already have the credentials for the AP you would be targeting you wouldn't need the Pineapple. Quote Link to comment Share on other sites More sharing options...
redhook Posted April 12, 2012 Share Posted April 12, 2012 I am new to this also but have some ideas. For you more advanced users, would it be possible to code a "pseudo-authentication" for the Pineapple that would send a client that is secured by WPA or WEP or WPA2 a fake key and when the client responds with the encrypted password...Jasager...say, "yep, that's the right password". After the initial probe, according to 802.11, it is the router that initiates the connection by sending the client a key, the client then responds with a password that is encrypted and then the router will either accept or deny access depending on if the password is correct. Will this be possible? Clients are not secured, the AP is. If a client sends out a probe request looking for a secured AP that they usually connect to the Pineapple will respond saying that it is that AP. Since the Pineapple is not secured the client will be able to connect to it anyway (no authentication required). Test it out sometime and you will see that this works, I have tested this against several devices that only connect to WPA2 secured wireless APs and they connect without issue. Not to mention that the client would know that you are not the AP they are looking for when their session handshake fails if you were to attempt what you are suggesting (its an encrypted session, you cannot fake this). Quote Link to comment Share on other sites More sharing options...
thestudent Posted April 13, 2012 Share Posted April 13, 2012 Clients are not secured, the AP is. If a client sends out a probe request looking for a secured AP that they usually connect to the Pineapple will respond saying that it is that AP. Since the Pineapple is not secured the client will be able to connect to it anyway (no authentication required). Test it out sometime and you will see that this works, I have tested this against several devices that only connect to WPA2 secured wireless APs and they connect without issue. Not to mention that the client would know that you are not the AP they are looking for when their session handshake fails if you were to attempt what you are suggesting (its an encrypted session, you cannot fake this). Hmm..ok. I have a lot of testing to do to figure this thing out...my Mark IV is in the mail, thanks. Can anyone post a link to a "why jasager works" description. I'm sure they out there but I cant find any really good "this is what is actually happening behind the scenes" articles. thanks in advance. Quote Link to comment Share on other sites More sharing options...
Yamada Taro Posted April 13, 2012 Author Share Posted April 13, 2012 Thanks very much for all the Answers Sirs ! I think i understood it now ..will get it fully as soon as it is in my mail.. Of course if i got the credentials i can use any router for this purpose and i won`t need the Pinneapple..had a faulty logic here ^^ Thumbs Up for clearing that for me ! Quote Link to comment Share on other sites More sharing options...
redhook Posted April 13, 2012 Share Posted April 13, 2012 Hmm..ok. I have a lot of testing to do to figure this thing out...my Mark IV is in the mail, thanks. Can anyone post a link to a "why jasager works" description. I'm sure they out there but I cant find any really good "this is what is actually happening behind the scenes" articles. thanks in advance. http://hak5.org/episodes/episode-401-wi-fi-pineapples Quote Link to comment Share on other sites More sharing options...
thestudent Posted April 13, 2012 Share Posted April 13, 2012 http://hak5.org/episodes/episode-401-wi-fi-pineapples Thanks, I do need to go back and re-watch some of the old videos...but what I'm really looking for is an in-depth behind the scenes. Something that describes the networking aspects of whats going on packet wise and protocol wise. Thanks everyone. Quote Link to comment Share on other sites More sharing options...
barry99705 Posted April 13, 2012 Share Posted April 13, 2012 Thanks, I do need to go back and re-watch some of the old videos...but what I'm really looking for is an in-depth behind the scenes. Something that describes the networking aspects of whats going on packet wise and protocol wise. Thanks everyone. Networking 101. It's how it was designed to work. http://www.amazon.com/802-11-Wireless-Networks-Definitive-Edition/dp/0596100523/ref=sr_1_1?ie=UTF8&qid=1334319115&sr=8-1 Quote Link to comment Share on other sites More sharing options...
thestudent Posted April 13, 2012 Share Posted April 13, 2012 Networking 101. It's how it was designed to work. http://www.amazon.com/802-11-Wireless-Networks-Definitive-Edition/dp/0596100523/ref=sr_1_1?ie=UTF8&qid=1334319115&sr=8-1 Thanks barry Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.