WS8 - Wi-Fight Club: I am Jack's Evil Twin

Instructed by:  James Hawk

Level of Difficulty: Beginner

Abstract:

'Wi-Fight Club: I am Jack's Evil Twin' will teach you how to deploy rogue AP (Evil Twins) in your client's environment. Using rogue APs lets you test your client's Wireless Intrusion Detection System, passwords, wireless phishing education, and overall wireless security.

We will discuss rogue AP Tactics, Techniques, and Procedures, and how / why they work. In this workshop you will set up a CAPTIVE PORTAL, WPA2, and 802.1x rogue AP. We will also go over OWE and WPA3-SAE transition mode attacks.

We will walk through a scenario at a client's site, then set up a rogue AP to harvest user credentials for the various client networks. We will then crack the harvested credentials. We will finish up with a section on defense. We will be using EAPHAMMER, HOSTAPD-MANA, WIFIPHISHER, and AIRBASE-NG for the rogue AP section. HASHCAT, AIRCRACK-NG, and JOHN for the password cracking section. This workshop is for beginners, but participants should have basic Linux and 802.11 knowledge and be comfortable using virtual machines.

Pre-Requisites:

·      Students should be comfortable with running VMs.

·      Basic understanding of Linux.

·      Basic understanding of 802.11 and RF Theory.