# Evil Twin Attack 👺

One of my favorite mini-projects I completed, was based on an evil twin attack. An evil twin attack is when a threat actor sets up a fake WAP ( not the Cardi B song ) in hopes a victim will connect to it, instead of the legitimate one.

An evil twin attack is a type of man in the middle attack where PII or other sensitive information can be stolen.

For the project, I used Wifi Pumpkin 3 to help create the rogue access point .

![](https://i0.wp.com/1.bp.blogspot.com/-AOMSgVCh6q0/YQFqoJnBC6I/AAAAAAAAx5Y/lQ4RBWe8cPEzdSibcBhaA_BcZOwLJI3vACLcBGAsYHQ/s16000/2.png?w=640&ssl=1 align="left")

Once I cloned it successfully I then began to think of an access point I wanted to mimic . Since it was the season of Halloween and I was listening to Three Six Mafia, I thought it was appropriate to use Starbucks.

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1691170932514/ffb70028-c9ae-463a-a810-a8b282aeda76.jpeg align="center")

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1691170333851/e13750bc-7bd9-43ab-a9df-b11054a11cbc.png align="center")

As I was finishing setting up wifi pimpkin 3 , a captive portal began to download. A captive portal is what you see when you usually join public wifi ! "Typically, a ***captive portal*** presents the user with terms of service, which they must agree to before accessing your business's WiFi hotspot".

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1691170342719/a320e879-0c5a-44f4-bc9c-c22259a87ff2.png align="center")

once the captive portal was done loading I entered in fake credentials to see what would happen on my shell

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1691170214002/948bf4c3-329b-457f-a182-c2909086f5f5.png align="center")

here you can see the information that was entered into the captive portal ! I'm able to see passwords and email accounts. Spooky! Imagine if the captive portal was a replica of a social media website ?

![](https://cdn.hashnode.com/res/hashnode/image/upload/v1691170256101/9f6315b1-971c-49cc-8bb3-43981b20c212.png align="center")

It is very important to use a VPN while connecting to public wifi , especially if you are concerned with someone hacking into your phone or laptop.