New Wi-Fi attack method: "Deauth+Clone+Verify"

[7wp81x]

Proposed Changes

Added a new Wi-Fi attack method: "Deauth+Clone+Verify".

• Deauths the target network.
• Clones the network with the same SSID.
• If the user enters the correct wireless password, the attack stops.
• If the password is incorrect or not provided, deauthentication continues.

Types of Changes

"Deauth+Clone+Verify" New WiFi Attack Feature

Verification

Tested on CYD-2432S028 and CYD-2USB

Testing

Tested other Wifi atks feature that uses the evil_portal.cpp, seems working properly..

User-Facing Change

Added "Deauth+Clone+Verify" Wi-Fi attack, which forces users to authenticate by continuously deauthing until the correct password is provided.

Further Comments

Instead of stopping the deauth and manually checking the captured passwords, this new feature automates the process by continuously deauthing until the correct credentials are provided.

[GabriWar]

nice, tested and working, hoping for a merge soon

[Huzzla101]

Straight Fire... A new WIFI Pen testing method... This is off the hook we RULE the world. Keep on rocking in the free world...! 😶‍🌫️😶‍🌫️😶‍🌫️😶‍🌫️🏝️🦈🦈🦈🦈

…

On Wed, Feb 19, 2025 at 2:44 PM Gabriel Duarte Guerra < ***@***.***> wrote: nice, tested and working, hoping for a merge soon — Reply to this email directly, view it on GitHub <#762 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BLDL6BVKX7HPK7IOW3I5UBD2QSDFNAVCNFSM6AAAAABWJMNKKSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRYGY4TSNZTGA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***> [image: GabriWar]*GabriWar* left a comment (BruceDevices/firmware#762) <#762 (comment)> nice, tested and working, hoping for a merge soon — Reply to this email directly, view it on GitHub <#762 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BLDL6BVKX7HPK7IOW3I5UBD2QSDFNAVCNFSM6AAAAABWJMNKKSVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMNRYGY4TSNZTGA> . You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

-- Kind Regards Christian R. May Prosperity allways be with us!!

[7wp81x]

the disadvantage of this is you must be at range of the target AP.. otherwise it can't verify the password.. also it will disconnect all the clients when checking the pwd...

but i have an idea.. i don't know if this can work on few lines code but.. here:

1. We all know that it disconnect the clients from the AP and start a rouge AP right? so how about we capture the Handshake when it was disconnecting the clients from the AP... then after successful capture start the rouge AP and continue disconnecting...

2. create a password checker... that will check whether the password provided on rouge AP (Evil portal) matches the handshake...?

sorry for my explaination