WPA Enterprise Credential Harvester

WPA Enterprise Credential Harvester

Ataque against networks WPA2/3-Enterprise via AP falso with RADIUS malicious:

n
• Rogue AP + RADIUS — Levanta AP with el ESSID corporativo and un FreeRADIUS configured for aceptar cualquier identidad.
n
• Certificado falso — Genera certificado SSL that imitates to the legitimate (same CN, O, OU) for that the cliente no sospeche.
n
• MSCHAPv2 capture — Captura the challenge/response of MSCHAPv2 that the cliente sends to the autenticarse.
n
• Cracking — Convierte the captures a formato hashcat (-m 5500) for cracking offline. MSCHAPv2 es inherentemente weak.
n
• EAP downgrade — Intenta forzar to the cliente a usesr EAP-MSCHAPv2 in lugar of EAP-TLS (if the supplicant lo allows).
n

Requirements: 2 adaptadores WiFi, hostapd-mana or hostapd-wpe, FreeRADIUS.