<br />Linset is popular for hacking wpa2 WiFi networks but it has many bugs and was already created 2 years ago. But there is FLUXION, created 3 months ago.<br /><br /><br />WHAT IS FLUXION?<br />Fluxion is a new version of linset by vk496. With fewer bugs and more features. It is compatible with the latest version of Kali<br /><br />Fluxion gets weekly updates with new features, improvements and bug fixes. Be sure to check the changelog<br /><br /><br />How it works<br />* Scan the networks. *<br />* Capture handshake (cannot be used without a valid handshake, it is necessary to verify the password) *<br />* Use the WEB interface *<br />* Launch a FakeAP instance to imitate the original access point *<br />* Spawns an MDK3 process, which deauthenticates all users connected to the target network, so that they can be lured into connecting to the FakeAP and entering the WPA password. *<br />* A fake DNS server is launched in order to capture all DNS requests and redirect them to the machine running the script *<br />* A captive portal is launched in order to serve a page, which asks the user to enter their WPA password *<br />* Each submitted password is verified against the previously captured handshake *<br />* The attack will terminate automatically as soon as a correct password has been submitted *<br /><br />Requirements<br />A Linux OS Kali Linux 2 or Kali 2.016,1 rolling. Kali 2 and 2016 to support the latest versions of aircrack-ng<br />An external wifi card is recommended<br /><br />Download<br /><br />git clone Los enlaces son solo para miembros. Registrate o iniciá sesión<br /><br />cd fluxion<br /><br />./fluxion<br /><br />Los enlaces son solo para miembros. Registrate o iniciá sesión<br /><br />
🌐 This is an automatic translation of a topic from Underc0de, the largest Spanish-speaking hacking and IT community. Read the original (Spanish) and reply →
This is really good news, since linset, despite working well (in most cases), it is true that the project was abandoned for a long time.<br /><br />Will have to give it a try.<br /><br />Thanks for sharing.
Excuse my ignorance but it's something I've been dragging around in my head for a long time, ever since I did my own tests with Linset on M-H.<br /><br />What's the point of capturing the handshake if the key is going to be captured when it's typed by the user upon entering the fake AP?<br />
Hi, this tool works with https, when a user enters with ssl it redirects them, or does it have to be only http]
Cita de: Hu3c0 en Julio 07, 2016, 12:41:44 PM<br />Excuse my ignorance but it's something I've been dragging around in my head for a long time, ever since I did my own tests with Linset on M-H.<br /><br />What's the point of capturing the handshake if the key is going to be captured when it's typed by the user upon entering the fake AP?<br /><br /><br />Hi Hu3c0<br /><br />Capturing the Handshake is necessary in order to confirm whether the password entered by the user is correct. 8) 8)<br /><br />While you are generating the Fake AP and the user enters the password, it attempts to crack the Handshake with the key typed by the user at that moment. Understand?<br /><br />If the password is correct and it manages to crack the Handshake, the attack stops and shows you the password.<br />If it fails to crack it, the process will continue until the password typed in the Fake AP is correct.<br /><br />Imagine a dictionary attack with the passwords live and in real time ;D ;D ;D<br /><br />Or how do you think the key entered by the user could be confirmed? ;) ;)<br /><br />Regards.<br /><br />Jack-C0de<br /><br />Ps. I think I'm completely sure about how the process works, if not please correct me. ;)
Cita de: Jack-C0de en Julio 08, 2016, 05:23:08 PM<br /><br /><br />Okay Jack-C0de, understood and thank you very much...!Cita de: Hu3c0 en Julio 07, 2016, 12:41:44 PM<br />Excuse my ignorance but it's something I've been dragging around in my head for a long time, ever since I did my own tests with Linset on M-H.<br /><br />What's the point of capturing the handshake if the key is going to be captured when it's typed by the user upon entering the fake AP?<br /><br /><br />Hi Hu3c0<br /><br />Capturing the Handshake is necessary in order to confirm whether the password entered by the user is correct. 8) 8)<br /><br />While you are generating the Fake AP and the user enters the password, it attempts to crack the Handshake with the key typed by the user at that moment. Understand?<br /><br />If the password is correct and it manages to crack the Handshake, the attack stops and shows you the password.<br />If it fails to crack it, the process will continue until the password typed in the Fake AP is correct.<br /><br />Imagine a dictionary attack with the passwords live and in real time ;D ;D ;D<br /><br />Or how do you think the key entered by the user could be confirmed? ;) ;)<br /><br />Regards.<br /><br />Jack-C0de<br /><br />Ps. I think I'm completely sure about how the process works, if not please correct me. ;)<br />
Cita de: Hu3c0 en Julio 09, 2016, 12:44:58 PM<br />Okay Jack-C0de, understood and thank you very much...!<br /><br /><br />You're welcome, that's what we're here for. :)<br /><br />Regards<br /><br />Jack-C0de
Noting it down to try it out<br /><br />Sent from my m2 note using Tapatalk<br /><br />
Help, I get an error when installing php5-cgi, because it's obsolete for php7, any solution.... I updated the kali repositories and now I can't install php5-cgi, any good samaritan :)
@Naab upload an image so we can see your problem<br /><br />Regards
A question, can fluxion also be used on wifislax?? And also I wanted to know. Is this version more updated than revision 4.38. I think that was the last one vk496 released, I also saw around the web a couple of linset mods with ssl support from some guy named dyinly, those were my doubts. Anyway thanks for sharing