Fluxion

Description

Fluxion is a security auditing tool that creates an evil twin access point to perform social engineering attacks against WPA networks. It deauthenticates users from the target AP, presents a fake captive portal mimicking the router login page, and captures the WPA passphrase when entered.

Use Cases

• Create evil twin access points for WPA passphrase capture
• Test employee awareness against rogue AP social engineering
• Perform captive portal phishing attacks on wireless networks

Attack Phases

MITRE ATT&CK Techniques (2)