A fake credential harvesting rogue captive portal for Raspberry Pi ZeroW / 3 / 3 B+ using Kali Linux
I do NOT take any responsibility for your actions while using any material provided from this repository. Performing attacks on public users is illegal and should require permission from all users within the radius of the network.
Software:
Balena Etcher: https://www.balena.io/etcher/
Kali Linux 2019.3 for Raspberry Pi 3,3+: https://images.kali.org/arm-images/kali-linux-2021.1-rpi4-nexmon-64.img.xz
Fresh install of Kali Linux ARM 64-bit: Flash the Kali Image to the Pi using Etcher OR follow the steps below if you are using a linux OS to image the SD Card:
#Download the image
wget https://images.offensive-security.com/arm-images/kali-linux-2019.3-rpi3-nexmon-64.img.xz
#Extract
unxz kali-linux-2019.2a-rpi3-nexmon-64.img.xz
#Find the SD Card device name
sudo fdisk -l
#In my case it was /dev/mmcblk1
#Flash the image to the SD
sudo dd if=/home/PROFILE NAME/kali-linux-2019.2a-rpi3-nexmon-64.img of=/dev/mmcblk1 status=progress bs=4M
Insert the SD Card into the Pi and ssh to the new system with the following details:
username: kali
password: kali
Please ensure you regenerate the SSH keys and update the password, otherwise you will be hacked.
cd /etc/ssh/
sudo mkdir default_kali_keys
sudo mv ssh_host_* default_kali_keys/
sudo dpkg-reconfigure openssh-server
sudo passwd kali
exit
To reconnect, you'll need to clear the key from your system. on linux and macOS it'll usually give you a command to run e.g:
ssh-keygen -f "/home/username/.ssh/known_hosts" -R "IP/Hostname of Pi"
This is performed differently on each system.
Once you've done this, reconnect using your new password, install dependencies and run the install script:
sudo apt-get update
sudo apt-get install -y git php dnsmasq dnsmasq-base macchanger hostapd
git clone https://github.com/NickJongens/PiEvilTwin
cd PiEvilTwin
chmod +x install.sh
sudo ./install.sh
sudo reboot
During installation, macchanger may ask whether or not MAC addresses should be changed automatically - choose "No". The startup script will perform this task more reliably.
If you receive a similar message with "Restart services during package upgrades without asking?" - choose "Yes". This is required for cron to work.
After the reboot, wait 30 seconds and then look for an access point named "Google Free WiFi."
Connecting to it from an Apple, Android or Windows device should automatically bring up a captive portal login screen. The Windows captive portal is a bit harder to introduce properly. (BETA) It requires a folder called 'redirect' with it's own 'index.html' file redirecting to the root website index.html
Credentials are logged in /var/www/html/usernames.txt.
Website data will be able to be modified under /var/www/html
To use an external WiFi Adapter for better range, please change the 'wlan0' value in the following files:
hostapd.conf
PiEvilTwinStart.sh
To:
Your WiFi adapter interface name e.g 'wlan1' without quotes before running the install script.
I do NOT take any responsibility for your actions while using any material provided from this repository. Performing attacks on public users is illegal and should require permission from all users within the radius of the network.