+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Wifi 5G WPA WEP Bluetooth Wireless Hacking (https://hackforums.net/forumdisplay.php?fid=104)
+---- Thread: how to capture login credentials at Starbucks (/showthread.php?tid=5811381)
how to capture login credentials at Starbucks - fogstone - Mar 14, 2018
I want to capture login info of other students' portal info at a Starbucks near my school. It's right next to my school and lots of students study there and its the same as their wifi login info.
Could this be done in Wireshark? Its encrypted with HTTPS instead of HTTP but it feels doable to me.
RE: how to capture login credentials at Starbucks - imstacked - Mar 14, 2018
Might be easier trying another website that doesn't have https, is there another popular website people visit while at starbucks?
RE: how to capture login credentials at Starbucks - Lukos1234 - Mar 14, 2018
Check if you have router access, from there you will just have to change the DNS of "facebook.com" to the website of your choice (make it seem like the original one) get what you need and redirect them to the first site.
Or arp spoof and try to sslstrip (I doubt it will work but give it a shot)
RE: how to capture login credentials at Starbucks - Krueger - Mar 15, 2018
(Mar 14, 2018 04:36 PM)Lukos1234 Wrote: Check if you have router access, from there you will just have to change the DNS of "facebook.com" to the website of your choice (make it seem like the original one) get what you need and redirect them to the first site.
Or arp spoof and try to sslstrip (I doubt it will work but give it a shot)
this .. you could easily phish anyone with your website using MITM Attacks. But Phishing isnt allowed on HF we cant discuss about it.
or
dns2proxy and SSL Strip 2 may solve the issue 😊
RE: how to capture login credentials at Starbucks - Csharpcoder - Mar 15, 2018
Urm. I think most people are not thinking outside of the box.
If you cannot gain access to Starbuck router think what would a hacker do????
Well let me tell you. A real hacker will set up a hot spot exactly the same details as the Starbucks hot spot. (including same password if any)
Next... use all available resources you have to knock their router offline, or at least send constant requests that shutdown and reboot the router. You should have this on loop.
Next. Open Wireshark and watch your victims connect.
Decrypting the traffic that's another story (but all you asked for was how to sniff)
RE: how to capture login credentials at Starbucks - tron - Mar 15, 2018
$tarbuck$ doesn't use a password, they have a screen that comes up where you click "Agree" to continue and use their internet, so you'd have to copy that website.
RE: how to capture login credentials at Starbucks - Krueger - Mar 16, 2018
(Mar 15, 2018 09:00 PM)tron Wrote: $tarbuck$ doesn't use a password, they have a screen that comes up where you click "Agree" to continue and use their internet, so you'd have to copy that website.
Whats your point here ? He doesnt ask for the Starbucks password 😊
RE: how to capture login credentials at Starbucks - tron - Mar 16, 2018
(Mar 15, 2018 11:03 AM)Csharpcoder Wrote: Urm. I think most people are not thinking outside of the box.
If you cannot gain access to Starbuck router think what would a hacker do????
Well let me tell you. A real hacker will set up a hot spot exactly the same details as the Starbucks hot spot. (including same password if any)
Next... use all available resources you have to knock their router offline, or at least send constant requests that shutdown and reboot the router. You should have this on loop.
Next. Open Wireshark and watch your victims connect.
Decrypting the traffic that's another story (but all you asked for was how to sniff)
Someone else mentioned it asyou can see, I was also responding to them.
RE: how to capture login credentials at Starbucks - zerocool - Mar 17, 2018
(Mar 14, 2018 12:45 PM)fogstone Wrote: I want to capture login info of other students' portal info at a Starbucks near my school. It's right next to my school and lots of students study there and its the same as their wifi login info.
Could this be done in Wireshark? Its encrypted with HTTPS instead of HTTP but it feels doable to me.
Try an clone it see if they would be silly enough to login using credentials.
Spoiler (Click to View)
Code
Install
https://github.com/wifiphisher/wifiphisher
And then
./wifiphisher --noextensions --essid "Starbucks" -p oauth-login -kB