Developing extra captive portals for captiveflask plugins
the plugin captiveflask allow the Attacker mount a wireless access point which is used in conjuction with a web server and iptables traffic capturing rules to create the phishing portal. Users can freely connect to these networks without a password and will often be directed to a login page where a password is required before being allowed to browse the web.
Wireless phishing is a technique where an attacker tries to trick wireless network users into revealing sensitive information. This usually happens on an open wireless network using a captive portal. A captive portal is a required web page displayed in a user's browser (often for login, payment, or policy agreement) before they are granted full access to the network resources.
For the interested, we give a brief technical overview of the process of creating a phishing portal here. Example configuration files for creating a simple captive portal template to Wp3. first of all you need to make a repository fork and add your plugin template.
Example configuration files for creating a simple template.
# file => exampleplugin.py
from wifipumpkin3.plugins.captiveflask.plugin import CaptiveTemplatePlugin
import wifipumpkin3.core.utility.constants as C # import plugin class base
class exampleplugin(CaptiveTemplatePlugin):
Name = "exampleplugin"
Version = "1.0"
Description = "Example is a simple portal default page'"
Author = "Dr.rootsu&Ikteach"
TemplatePath = C.TEMPLATES_FLASK + "templates/exampleplugin"
StaticPath = C.TEMPLATES_FLASK + "templates/exampleplugin/static"
Preview = C.TEMPLATES_FLASK + "templates/exampleplugin/preview.png"exampleplugin/
├── preview.png
├── static
│ ├── css
│ │ ├── bootstrap.min.css
│ │ ├── main.css
│ │ ├── styles.css
│ │ └── util.css
│ └── js
│ ├── bootstrap.min.js
│ ├── jquery-1.11.1.min.js
│ └── main.js
└── templates
├── login.html
└── login_successful.html
4 directories, 9 filesSet Up the Phishing your custom page login captive portal
login.html
<!DOCTYPE html>
<html >
<head>
<title>Authentification</title>
<link rel="stylesheet" type="text/css" href="{{ url_for('static', filename='css/util.css') }}">
<link rel="stylesheet" type="text/css" href="{{ url_for('static', filename='css/main.css') }}">
</head>
<body >
<div >
<!-- Page content -->
<form method="POST" >
Login:<br>
<input type="text" name="login">
<br>
Password:<br>
<input type="text" name="password">
<br><br>
<input type="submit" value="Sig up">
</form>
</div>
</body>
</html>Set Up the Phishing your custom page login successful
login_successful.html
<!DOCTYPE html>
<html >
<head>
<title>Authentification</title>
<link rel="stylesheet" type="text/css" href="{{ url_for('static', filename='css/util.css') }}">
<link rel="stylesheet" type="text/css" href="{{ url_for('static', filename='css/main.css') }}">
</head>
<h1>Login successful</h1>
</body>
</html>if want to create multiple language that allow the user to pick a different one, checkout! In plugin exampleplugin.py change the bool var ConfigParser to True and override function init_language. look;
# file => exampleplugin.py
from wifipumpkin3.plugins.captiveflask.plugin import CaptiveTemplatePlugin
import wifipumpkin3.core.utility.constants as C # import plugin class base
class exampleplugin(CaptiveTemplatePlugin):
Name = "exampleplugin"
Version = "1.0"
Description = "Example is a simple portal default page'"
Author = "Dr.rootsu&Ikteach"
TemplatePath = C.TEMPLATES_FLASK + "templates/exampleplugin"
StaticPath = C.TEMPLATES_FLASK + "templates/exampleplugin/static"
Preview = C.TEMPLATES_FLASK + "templates/exampleplugin/preview.png"
Languages = ["En", "ptBr"] # default is En exampleplugin/
├── preview.png
├── static
│ ├── css
│ │ ├── bootstrap.min.css
│ │ ├── main.css
│ │ ├── styles.css
│ │ └── util.css
│ └── js
│ ├── bootstrap.min.js
│ ├── jquery-1.11.1.min.js
│ └── main.js
└── templates
│ ├── En
│ │ └── templates
│ │ ├── login.html
│ │ └── login_successful.html
│ └── ptBr
│ └── templates
│ ├── login.html
│ └── login_successful.html
9 directories, 13 filesif you allready wp3 installed, only need to use the command captiveflask on terminal. this command is mount a webserver with flask running on http://localhost:80, open this your favorites browser and preview your custom portal.
$ cd templates
$ sudo captiveflask -t $(pwd)/example -s $(pwd)/example/static -r 127.0.0.1 -f truenow, you can choose to keep your custom version for yourself or send it to all wp3 users.
have fun! Hack the Planet
Any malicious use of the contents from this repository, will not hold the author responsible, the contents are solely for educational purpose.
- Usage of extra-captiveflask template for attacking without prior mutual consistency can be considered as an illegal activity.
- Authors assume no liability and are not responsible for any misuse or damage caused by this program.