1 00:00:00,390 --> 00:00:07,920 Hi and welcome back in this tutorial, I'm going to teach you how to perform evil twin attack an evil 2 00:00:07,920 --> 00:00:13,860 twin is a rogue or fake wireless access point that appears as a genuine hotspot. 3 00:00:14,340 --> 00:00:19,980 The idea is to set up your own network that looks exactly like the one you are attacking. 4 00:00:20,730 --> 00:00:22,350 So let's get started. 5 00:00:22,920 --> 00:00:29,610 First tip, as always, is to make sure you have your wireless adapter into monitor mode and then scan 6 00:00:29,610 --> 00:00:37,500 all the wireless access points in your range using Arrow Dump Energy and the name of your interface. 7 00:00:38,340 --> 00:00:41,820 Now you need to find the access point you want to clone. 8 00:00:42,690 --> 00:00:49,950 Mine is clean it, so I'm going to use Airbase Energy, which is a tool used to convert your wireless 9 00:00:49,950 --> 00:00:52,350 card into an access point. 10 00:00:53,450 --> 00:01:02,030 So go ahead and type in the following Airbase and G Dash A and the Mac address of the access point you 11 00:01:02,030 --> 00:01:03,110 want to clone. 12 00:01:03,710 --> 00:01:12,410 Dash E for the name of the network and Channel six and then the Interface W line zero more. 13 00:01:13,280 --> 00:01:15,980 Now the fake access point is running. 14 00:01:16,730 --> 00:01:23,270 Next step is forcing the client to disconnect from the real access point and connecting to your fake 15 00:01:23,270 --> 00:01:26,960 access point using the following command. 16 00:01:27,500 --> 00:01:35,240 AirPlay and G Dash zero zero, Dash eight and the Mac address of the real access point. 17 00:01:36,260 --> 00:01:41,990 Now, if my signal is stronger, he will automatically reconnect to my evil twin. 18 00:01:43,010 --> 00:01:47,390 As you can see, a client has connected to my fake access point. 19 00:01:47,930 --> 00:01:53,180 OK, so now I need to provide internet access to the fake access point. 20 00:01:53,420 --> 00:01:58,670 And to do this, you just have to know which interface is providing you with internet. 21 00:01:59,070 --> 00:01:59,420 Mine. 22 00:01:59,420 --> 00:02:01,310 Is it age zero? 23 00:02:02,060 --> 00:02:04,610 First of all, you need bridge utils. 24 00:02:04,940 --> 00:02:09,800 So go ahead and type up with to get install bridge utils. 25 00:02:10,190 --> 00:02:18,680 And after the installation has completed, type B or C, D, L and B are fake, you can name it any 26 00:02:18,680 --> 00:02:19,610 way you like. 27 00:02:19,820 --> 00:02:24,470 In my case, I have name ID fake, but it doesn't really matter. 28 00:02:25,070 --> 00:02:30,530 Next, i b r c d l add e fake eta h zero. 29 00:02:30,920 --> 00:02:37,340 This will create a bridge between fake and ETA age zero, which has internet access. 30 00:02:37,940 --> 00:02:44,730 You also need to add the interface, which is created by Air Base and G, so use the same command. 31 00:02:44,750 --> 00:02:48,920 Just change the name of the interface to eighty-year-old. 32 00:02:49,610 --> 00:02:56,510 This interface should be the same on your system because air based NGO will create this interface for 33 00:02:56,510 --> 00:02:56,900 you. 34 00:02:57,620 --> 00:03:03,170 Next step is to add IP addresses to these interfaces and bring them up. 35 00:03:04,070 --> 00:03:13,040 So go ahead and type ifconfig 8-0 up and then I f config fake op. 36 00:03:13,670 --> 00:03:17,030 And finally, the evil twin attack is complete. 37 00:03:17,450 --> 00:03:22,460 The client is now connected to your fake network and can use the internet. 38 00:03:23,150 --> 00:03:30,080 Now, all the package that go from the user to the internet pass through your interface and this package 39 00:03:30,090 --> 00:03:32,600 can be monitored with Wireshark. 40 00:03:33,260 --> 00:03:42,500 So in your terminal type Wireshark and wait a few seconds and then go up here and click Capture and 41 00:03:42,500 --> 00:03:45,110 select the interface you have created. 42 00:03:45,590 --> 00:03:50,830 In my case, is this one right here called fake and press start. 43 00:03:51,440 --> 00:03:56,720 And now you can listen to all the wireless traffic on fake interface. 44 00:03:57,470 --> 00:04:00,770 So have fun and thanks for watching.