Broadcasting WPA encrypted networks

[pineorange]

Hi,

I'm interested in mounting an attack where I already know the passphrase of a WPA/WPA2 encrypted network, then try to impersonate it.

I've tried modifiying the /etc/config/wireless file, but I don't really understand when the PineAP links the list of SSIDs to interfaces.

I already know that I have to modify an interface by adding  :

•        option encryption 'psk2+ccmp'
•         option ssid 'MySSID'
•         option key 'MyKey'

but it looks like modifying existing entries in this files has no effect on the broadcasted SSIDs by PineAP.

Could someone help me? Many thanks.

[FreqANDY]

So you're approaching an existing network... Launching a SSID with the same name / security setup / password, while I assume deauthing the target router in hopes that you'll redirect connected devices to your secure network ?

[Sebkinne]

7 hours ago, FreqANDY said:

So you're approaching an existing network... Launching a SSID with the same name / security setup / password, while I assume deauthing the target router in hopes that you'll redirect connected devices to your secure network ?

That would work, yeah. 

[pineorange]

That's exactly what I want to do, but I really don't know how to integrate it into PineAP. I read how to create a secure network on OpenWRT, but I still do not know which interface is linked to PineAP, and how.