Wi-Fi Hacking for Web Pentesters
Talkat AppSec California 2015 · on Tuesday, 2015-01-27· at 14:45· Annenberg Community Beach House: Track 3, 415 Pacific Coast Hwy·
summary
Clones of real captive portals (not just a concept) get built and deployed, capturing ISP logins from XFINITY Wi‑Fi and hotel hotspots; tools actually used include Wi‑Fi Pineapple, PwnStar, HTTrack, aireplay‑ng, MDK3, Wi‑Fi Fisher and Intercepter‑NG; attacks perform deauth to force reconnection, log POSTed credentials, SSL‑strip and session‑hijack (Amazon session stolen in demo), and run from Kali on Pineapple, Raspberry Pi or phone; code and captive‑portal templates are released on GitHub and the demos work live.
AI-written summary · about
chapters (13)
- 0:00Start
- 5:19Agenda
- 9:00Identify Guerrillas
- 10:03Find a Wireless Network
- 10:18Wi-Fi Analyzer
- 13:45Steps Required To Clone and Recognizes Access Points
- 20:27Basic Redirect
- 21:18Key Variables
- 25:44Dd-Wrt
- 27:31Kali Linux
- 29:51Captive Portal
- 36:59Basic Tools
- 38:07Favorite Tools
related talks
01h 00mA Security Tester's Toolbox
31mConquer the Enterprise from Inside
59mHack Yourself First
41mJust Another Live Hacking - How Insecure Is Secure Enough?
44mManna from Heaven: Improving the State of Wireless Rogue AP Attacks
21mSecurity is Everyone's Responsibility
01h 01mA security tester's toolkit
33mWi-Fi Brokering