[sc0re]

wow that sorta sad considering how OLD pixie dust is

Ya, I have no luck in my areas with the pixie dust attack....even other areas of my city I have tried with no luck yet. I tried the airgeddon and it is a pretty nifty utility he put together!

[s3n-py]

Pfft...Have you tried any of these lately?..Please go ahead and do so. Let me know what happens. It seems you have just read about these and haven't actually done anything.
You can't sniff SHIT. If sniffing means looking at URLs ..good for you.
You can't redirect SHIT. HSTS would not allow the browser to connect to your website unless the victim is trying to browse to a really really really shitty site.
You can't MiTM SHIT. in case you are referring to hooks, SSLStrip, Beef Injections etc. Either the browser needs to be shitty IE5 or something or again the victim needs to be browsing a really really really shitty website.

If it is a normal user who uses FB.Google and Insta 90% of the time (which is like 95% of the users)..you can't do SHIT.

Recon??...Looking at Mac addresses of devices? and their OS? ...what good is that?

Evil Twin? really. Ok. Let us say the victim connects to YOUR evil twin and you give him internet access. All the above conditions still stand. Now, go and actually DO any of these and not come back here after watching YT videos.

---

Yeah?...what are these "sophisticated attacks"  and what is the "right set up"...and how is HSTS "easily bypassed"? ...Let's hear it.

Dude calm down.... read a little bit, there is always a way. As far as FB and Insta goes anyway, who cares about that information anyway? If I wanted to get into someones FB I would use the username in the html and just read through there timeline for the password. The information worth getting isn't FB and Insta anyway.

---

Lmao. You certaintly do not know the steps of penetration testing then... the holy grail of pentesting is actually getting INSIDE the network. From there, you exploit the machines inside that network.

Recon, Scan/Profiling, Penetrate, Backdooring, Destroy the evidence...

That is exactly what I was saying.... ????

[roosiinfidel09]

Dude calm down.... read a little bit, there is always a way. As far as FB and Insta goes anyway, who cares about that information anyway? If I wanted to get into someones FB I would use the username in the html and just read through there timeline for the password. The information worth getting isn't FB and Insta anyway.

---

That is exactly what I was saying.... ????

Yea...it is always the new members who have ALL the answers. LOL. Yo! Dumbfuck. When you have a way let us know. Fuck your conjecture. We are miles ahead.

---

 Ya, I have no luck in my areas with the pixie dust attack....even other areas of my city I have tried with no luck yet.  I tried the airgeddon and it is a pretty nifty utility he put together!

Airgeddon depends on a shitty router. Please dont try and educate me about EVIL TWIN. HSTS fucks it in it's ass. What I wanna know is what you do AFTER you gain access. Jack fucking shit. Have proof. post it. Truth is.... with HSTS...browser hacking is dead. You ain't hacking no apps for sure. All you have is a free internet connection where you see "URLs" being browsed ...You make a video of that and call it "Hacking" to make more fool out of already vulnerable fucks. Truth..again is that...Wi-Fi access to a foreign network amounts to jack fucking shit. Eagerly waiting for a rebuttal.

[Robert Elias]

I hope someone can help me out. I recently purchased a new wifi router RT-AX88U. Today I was looking at my client lists and did not recognize a
Samsung Android Automatic IP CC:B1:1A:11:69:16

This device was connected to my 5g network. Any idea how they were able to connect when it is password protected? I appreciate your follow up on this.

Regards,

[txnerd]

I've used it for cracking WEP, and been able to get really lucky and find some writers that were vulnerable to the WPS exploit..

[OR10N]

Personally as far as automated scripts go I'm a really big fan of airgeddon (incl. in parrot / kali) since it manages wps pixiedust, bruteforce and "known" pin atttacks as well as helping to automate aircrack-ng suite based attacks like using an aireplay deauth to bounce users off nd capture the handshake when they reconnect then aircrack to attempt to match it with a wordlist.
though realisticlly you're going to have the best luck by far by learning to do a deauth attack manually, targetting a specific wireless client for best results then, if successful. ruinning the handshake against something like the rockyou wordlist or some other (there are some decent ones on these forums just look, but rockyou ships with parrot / kali and actually still manages a pretty surprising success rate)