[fogstone]

I want to capture login info of other students' portal info at a Starbucks near my school. It's right next to my school and lots of students study there and its the same as their wifi login info.

Could this be done in Wireshark? Its encrypted with HTTPS instead of HTTP but it feels doable to me.

[imstacked]

Might be easier trying another website that doesn't have https, is there another popular website people visit while at starbucks?

[Lukos1234]

Check if you have router access, from there you will just have to change the DNS of "facebook.com" to the website of your choice (make it seem like the original one) get what you need and redirect them to the first site.

Or arp spoof and try to sslstrip (I doubt it will work but give it a shot)

[Krueger]

Check if you have router access, from there you will just have to change the DNS of "facebook.com" to the website of your choice (make it seem like the original one) get what you need and redirect them to the first site.

Or arp spoof and try to sslstrip (I doubt it will work but give it a shot)

this .. you could easily phish anyone with your website using MITM Attacks. But Phishing isnt allowed on HF we cant discuss about it.
or
dns2proxy and SSL Strip 2 may solve the issue 😊

[Csharpcoder]

Urm. I think most people are not thinking outside of the box.

If you cannot gain access to Starbuck router think what would a hacker do????

Well let me tell you. A real hacker will set up a hot spot exactly the same details as the Starbucks hot spot. (including same password if any)

Next... use all available resources you have to knock their router offline, or at least send constant requests that shutdown and reboot the router. You should have this on loop.
Next. Open Wireshark and watch your victims connect.
Decrypting the traffic that's another story (but all you asked for was how to sniff)

[tron]

$tarbuck$ doesn't use a password, they have a screen that comes up where you click "Agree" to continue and use their internet, so you'd have to copy that website.

[Krueger]

$tarbuck$ doesn't use a password, they have a screen that comes up where you click "Agree" to continue and use their internet, so you'd have to copy that website.

Whats your point here ? He doesnt ask for the Starbucks password 😊

[tron]

Urm. I think most people are not thinking outside of the box.

If you cannot gain access to Starbuck router think what would a hacker do????

Well let me tell you. A real hacker will set up a hot spot exactly the same details as the Starbucks hot spot. (including same password if any)

Next... use all available resources you have to knock their router offline, or at least send constant requests that shutdown and reboot the router. You should have this on loop.
Next. Open Wireshark and watch your victims connect.
Decrypting the traffic that's another story (but all you asked for was how to sniff)

Someone else mentioned it asyou can see, I was also responding to them.

[zerocool]

I want to capture login info of other students' portal info at a Starbucks near my school. It's right next to my school and lots of students study there and its the same as their wifi login info.

Could this be done in Wireshark? Its encrypted with HTTPS instead of HTTP but it feels doable to me.

Try an clone it see if they would be silly enough to login using credentials.
Spoiler (Click to View) https://camo.githubusercontent.com/cbd0d...362e706e67

Code

Install

https://github.com/wifiphisher/wifiphisher

And then

./wifiphisher --noextensions --essid "Starbucks" -p oauth-login -kB