Jump to content

what do you think about this idea ?Dns spoofing + Rouge AP to achieve a perfect timed splash/captive portal mimc page that pops up instantly whenever a user tries to open an app , then it phishes them for the creds + 2FA if required getting them convinced

mooooon

By mooooon
in Security

 Share

Recommended Posts

mooooon Newbie

mooooon

Posted
Posted

 

that the pop is/from the real app.

example video

but the problem lies in knowing when the app was fired up.

i tried searching for traffic analysis attack but i found stuff far complicated than what i am looking for ..... while it should be for example if a packet sent to certain domain with a certain size range ... then we know the app was just opened.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...