
WARNING : THIS BLOG IS FOR EDUCATIONAL PURPOSES ONLY. I AM NOT RESPONSIBLE FOR YOUR ACTIONS. PLEASE GET THE REQUIRED PERMISSIONS BEFORE LAUNCHING AN ATTACK.
HOW FLUXION WORKS
Scan the networks.
Capture a handshake (can't be used without a valid handshake, it's necessary to verify the password)
Use WEB Interface *Launch a FakeAP instance to imitate the original access point
Spawns a MDK3 process, which deauthenticates all users connected to the target network, so they can be lured to connect to the FakeAP and enter the WIFI password.
A fake DNS server is launched in order to capture all DNS requests and redirect them to the host running the script
A captive portal is launched in order to serve a page, which prompts the user to enter their WIFI password
Each submitted password is verified by the handshake captured earlier
The attack will automatically terminate, as soon as a correct password is submitted
PLEASE NOTE: FLUXION WILL NOT WORK IF YOU ARE USING A VIRTUAL MACHINE. YOU WILL NEED A WIFI ADAPTER TO USE FLUXION. CONTACT ME IF YOU WANT SOME RECOMMENDED ADAPTERS.
STEP 1 : DOWNLOAD AND RUN FLUXION
ON YOUR TERMINAL TYPE
Go to the directory where fluxion is installed
Set permissions using chmod +x fluxion.sh
./fluxion.sh
./install.sh
You may have some packages missing. Download them using apt -get pakckage_name
STEP 2 : RUN FLUXION
./fluxion.sh
STEP 3 : USING FLUXION
SELECT LANGUAGE
Select Channels ( ALL CHANNELS RECOMMENDED)
IT WILL START SCANNING FOR NEARBY WIRELESS ACCESS POINTS. PRESS CTRL+C TO STOP SCANNING ONCE YOU CAN SEE THE TARGET NAME
SELECT ATTACK OPTION (FAKE AP HOSTPAD RECOMMENDED)
SELECT HANDSHAKE CHECK (PYRIT RECOMMENDED)
SELECT CAPTURE HANDSHAKE OPTION (DEAUTH ALL RECOMMENDED)
WAIT FOR THE HANDSHAKE (PATIENCE IS KEY)
CLICK ON CHECK HANDSHAKE
NOW CREATE AN SSL CERTIFICATE
SELECT WEB INTERACE
SELECT LOGIN PAGE
NOW WAIT FOR THE USER TO ENTER THEIR PASSWORD ON THE WEB INTERFACE, AND YOU SHOULD GET IT IN SOME TIME

THAT'S ALL. THANKS. I HAVE A BLOG CONTAINING THE CONCEPT EXPLANATION COMING UP SOON...
Comments