Wireless Hacking -- man in the middle attack

[Undertaker]

Right then since I got bored of WEP cracking which is relatively simple i've decided to try something else,

on to the next step Evil twin networks,


You need two wireless cards, once acts as an AP and the other routes traffic to the legitimate AP.

Treewalk to do the dns caching bit

apache/active perl for the local hosting

read here for more info http://airsnarf.shmoo.com/airsnarf4win.html


i think this is what real hustle used on their show, right once this is set up you can route traffic anywhere from a victim, done all this and its quite easy to steal important data not that i do.

My question is whats the next step, i know cain, wireshark sniffers can capture ssl and non encrypted passwords but wat else could one do

would it be possible to monitor exactly what someone is doing on their pc,

any suggestions

[BFG]

Where did you get softAP from m8? Fancy trying this... I saw The Real Hustle and have been trying to find out how to do this. Any tips appreciated.

[unclex]

Did I not post about this about three years ago?

The first person who made a softap dropped it due to all the security problems it caused.


but I am sure there are some new ones in the market.

[QfanatiQ]

I could never do this (I mean in a techincel capacity) but it does soudn VERY interesting.

......Q