Foro Wifi-libre.com

El handhsake no es realmente importante, solo sirve para ver si la contraseña pillada en la pagina falsa es valida.
Deberías trabajar con aircrack-ng en lugar de la suite elcomsoft ya que aircrack-ng solo necesita dos de los cuatro "way" del handshake.

edit :------

Gracias por la ayuda y consejos despues de llegar a tener certificado validado llego a la conclusion de que no es posible dar sporte https al 100% al no ofrecer esta tool conexion a la red para que las uri del certificado puedan ser verificadas

debo ser un caso especial porque no teniendo ni puta idea de bash ni de nada no se ni como he llegado a meter la creacion de certificados la redirecion y todo lo necesario .......etc etc
gracias wifi-libre he aprendido mucho de vuestros consejos siempre me tirabais una pista a seguir
no se ha podido con el objetivo pero debemos saber que era algo dificil y que aun nadie a conseguido

Ultima edición por dynyly (20-04-2016 03:38:38)

salu2
la verdad es una tool que ni fu ni fa ....es una perdida de tiempo es mi opinion  yo intentaria aprender con wifipumkin ; el template el custon el index.htm lo cambias por el que mas rabia te de
hay miles de videos por ahi de como funciona y se hace furrular logicamente has de saber que cada cosa que lanzas para que es y que es  pues tiene todo o casi  ...
se ha de tener dependencias y demas cosas para que furrule bien

tambien tiene el de visitor Airgedon parecido a al anterior pero para usuarios avanzados y con menos informacion ;me gustaria que alguien colgara un poco de info de como usarla mas a fondo pues tiene varias buenas cosas y nuevas y se ve potencial usandolo debidamente con sus dependencias
https://github.com/v1s1t0r1sh3r3/airgeddon

pero que no quede por informacion  fluxion mi version mas index sin ssl usar en root para no fallos
https://github.com/dynyly/fluxion

tambien tienes version de deltax mas actualizada creo que sin hanskake y opcion 2 no genera cert malo
https://github.com/deltaxflux/fluxion

y tambien como modificar index y añadir en esta misma casa
https://www.wifi-libre.com/topic-460-fluxion.html
por ahi en los comentarios se ve videos

Hi Dynyly,can you test wifi-pumpkin with DNSSpoof and Phishing Manager to get wifi password?
Hola Dynyly, ¿puedes probar wifi-pumpkin con DNSSpoof y Phishing Manager para obtener una contraseña wifi?

saludos 
Can you share me the bash script? I want to test it.
And can you or anyone please help me install let's encrypt certificate for fluxion?

¿Puedes compartirme el guión bash? Quiero probarlo.
Y puede usted o alguien por favor me ayude a instalar su let's encrypt certificado para fluxion?

Deberías abrir un tema a parte para tratar este asunto
Fluxion no es un servidor con lo cúal tu pregunta no tiene ninguno sentido...
Fluxion tira de gnix o apache o algo para montar un servidor local
Debes mirrar la documentación de let's encrypt para  implementar SSL en el servidor gnix o apache que crea fluxion.
Y me parece que modifcar scripts no es la forma de proceder... ¿Para qué? Si ya has montado tú el servidor con el certificado... ¿Hace falta un script para redacatr un par de reglas iptables y lanzar hostapod?
Era una pregunta retorica...
You should open a new trhead for this question as it is not related to yopur incial subject (linset)
Fluxion is no server and your question doesn't make sense.
It uses or gnix or apache (or something else) to create the server so you have to look for docuemntiton about let's encrypt and apache or gnix
Modifyng a script is not the way... What for? Once you created the server with the fake page and the ssl certificate do you need a script to write a couple of iptable rules and launch a soft AP wih hostapd? (That was a rethorical question)

¡Hola!
De esto se trata con el https... Poder identificar el sitio visitado.
Tu servidor local con su portal cautivo son compatibles htpps. Esto es una cosa.
Otra cosa es que sean identificados como "google" (o el sitio que queras)
Se pasa por una cadena de confianza y logicamente tu portal se detecta como ilegitimo, no es google.
Por muchos certificados auto-firmados que empleas...

That what https is about isn't it?
There is a chain of trust and you cannot bypass it.
Your local portal is ssl capable, Ok....
... But that doesn't identify your local portal as google itself (or whichever https website "visited" by the user) .

Saludos

¿Cual es? Para echarle un ojo.

You must be connected to the net to let google check your SSL.It work fine with me like that.The best way is to have somewhere, one computer with your website and the SSL connected to the net then you can use a mobile phone 3g or 4g linked with your attack computer.Be sure you have set up iptable rules as required for the mobile phone.

The second way is the same but maybe better:
Use a ddwrt with you and configure a repeater connection to your mobile phone then reboot and configure a chilispot linked to your SSL external server into the web admin page of ddwrt, reboot again and any client connecting to you will directly go to your webpage cause of windows is always finding a service to connect with him (tested with win7 and 10) so no iptable rules for the redirection is needed just a ethernet switch between your computer and your ddwrt.

Ultima edición por Koala (25-02-2017 12:30:13)

Like i said, you need internet access to let google check your SSL, assuming you are in the case of you want to phish or grab the wifi key you don't have network to connect to and the SSL can't be validated, the mobile phone or any internet conenction (ethernet if you want) is necessary in this case.I don't know sslforfree maybe he is not supported by all browsers and send ssl alert, you have to check wich browser work with it and wich not.

SSl external server can be linked to your own local network at home for example, it allow more autonomy to use attack everywhere outside your home.

You have to configure a chilispot, chilispot use radius for auth, for example if i connect with my won10 computer on wi-fi to your ddwrt router, short time after the connection windows will open a google page to your external SSL server.But you have to use a mobile phone to let the browser acces internet and check the SSl certificate.To be short:

Client win10 computer wi-fi --> Your ddwrt router with chilispot configured with the url of your external SSL server --> connected on repeater mode to the mobile phone

That all

EDIT: soy hablando inglès porque para expliquar algunas cosas soy mas a costumbre a inglès para algunas palabra

Ultima edición por Koala (26-02-2017 08:33:15)

No, im not here to teach anything, you have to learn things by yourself and it's very easy, a lot of tutorial are in the net.

Yes, it's what i mean, the phone with shared connection and the router as repeater with chilispot into, then take your attacker computer and configure all wifi connection to go on the ethernet link wich is your chilispot router (switch to wlan0 at eth0).

You have to read the wiki or the forum from where you want to install the ssl certificate, any configuration is different, just create your own host and enjoy it with a fine ssl

Ultima edición por Koala (27-02-2017 08:45:29)

Es peor fluxión viene ssl y errores

Of course you can into the config page enter your redirect page.

The redirection work with the main page of chilispot in your router which use radius auth.Redirection HTTPS to HTTPS will no work cause... it's https.But if your config is well done you don't have to do anything on the client computer side.For example if im the client, i have a google page open on https website and i connect to your network shortly after the connection a new tabs will open hilmselft with the page of your https server and the client can't avoid it, there is no redirection here cause it's a new tabs.. and this what we want

Same thing happen when the browser is closed, on windows7 a message appear on the right corner "more information are avaible, click there" and on windows 10, this stupid shit directly open the browser to your https server

Remember that windows is always finding a service to connect to, if you are on a train or airport station and you want o connect a hotspot you will be redirect to the service login.If that don't work there is something wrong with your switch (wlan0 to eth0) or your chilispot config.

Ultima edición por Koala (06-03-2017 13:35:00)