Skip to content

Repository files navigation

SpyPortal

Sniffing & geolocating saved SSIDs

OWASP Czech Chapter Meeting

August 5, 2021 | By @vavkamil

I know where you live

An introduction into the KARMA attack, exploiting the behavior of some Wi-Fi devices, where vulnerable clients broadcast a "preferred network list" (PNL), which contains the SSIDs of access points to which they have previously connected. We will revisit the old technique, current defenses applied by vendors and build a custom access point using Raspberry Pi & Python.


Slides

xss.vavkamil.cz/owasp

Proof of Concept

raspberry-pi

Usage

$ pip3 install -r requirements/requirements-probe_sniff.txt
$ sudo /home/${USER}/.pyenv/shims/python3 probe_sniff.py

$ pip3 install -r requirements/requirements-ssid_osint.txt
$ python3 ssid_osint.py -ssid "McDonald's FREE WIFI" -city "Brno"

Captive Portal

Use index.php with Building a Rogue Captive Portal with the Raspberry Pi

Example

probe_sniff.py

ssid_osint.py

captive-portal

About

Sniffing & geolocating saved SSIDs

Resources

Stars

11 stars

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages