- [Omar] One of the most simplistic wireless-based attacks
is basically using a rogue access point.
And basically, you can instantiate,
or configure a rogue access point
within the network, and then fool users to connect to you,
and then you can perform many different attacks,
like man-in-the-middle attacks,
potentially present some type of login screen
to a user, collect sensitive informations,
like passwords and usernames,
and many other tricks,
since you actually are gonna be in the middle.
Now, a rogue access point can also be configured
by an attacker to create a back door,
and then obtain access to the network
and its systems as well.
Now, in an evil twin attack,
the attacker creates a rogue access point,
and then configures it exactly the same
as in the existing corporate network.
So if I have a wireless access point
within a corporate environment,
with an SSID of CORP-NET,
like in this example, if I'm an attacker,
of course I can configure my own access point
and then deploy in the network,
and of course, configure with the same SSID,
and then have users connect to me
and potentially perform deauthentication attacks,
and force the users to actually connect to me,
then I'm in the path, and then I can actually
collect any data that is not encrypted.
Many different enterprise wireless solutions nowadays
provide features that will detect evil twin
and rogue access points within your network.
So they have many different features that can mitigate
these type of attacks.