Rogue One: A Wifi Story
summary
A modular Linux tool called Rogue AP Detector scans with iwlist or Kismet, fingerprints APs with Nmap, and runs active probes using airbase-ng and hcxdumptool to detect evil twins, karma probes, deauthentication floods and PMKID extraction attempts. Heuristics compare BSSID, encryption, channel and RSSI baselines and optionally load user profiles. Demos show recorded detection flows and a company assessment where three cases are caught: mismatched BSSID, exact clone with higher RSSI that fails enterprise auth, and pineapple karma responses. Sensors are stationary and the countermeasures return IP, ISP and traceroute data.
AI-written summary · about
chapters (8)
- 0:00Introduction to Wi-Fi security
- 2:22Wi-Fi fundamentals
- 6:52Types of rogue access points
- 9:27Wi-Fi attack vectors
- 14:14The detection tool framework
- 21:25Demos of attack detection
- 34:16Case study and conclusion
- 38:45Q&A session
related talks
44mManna from Heaven: Improving the State of Wireless Rogue AP Attacks
23mWiFi Pineapple Active Detection via a Raspberry Pi Zero
31mRise Of The WarPi
43mSocial Forensication: A Multidisciplinary Approach to Successful Social Engineering
40mUncovering Covert Channels in Your IoT Networks
52mWi-Fi Hacking for Web Pentesters
31mConquer the Enterprise from Inside
59mWireless security testing with attack