Skip to content

This is a ESP8266 program that creates a captive portal and phishes passwords. Not for malicious use, only a proof-of-concept.

License

Notifications You must be signed in to change notification settings

wszme/esp8266-captive-attack

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

11 Commits
 
 
 
 
 
 
 
 

Repository files navigation

ESP8266 Captive Portal Phishing Example

This code is for demonstration purposes only. It is not meant for any malicious intent.

WiFi captive portal meant for the NodeMCU ESP8266. It creates a WiFi with the name of your choosing. When an unsuspecting user joins the network, they are prompted with a captive portal which asks for a Email and an Email password input. When the user submits these informations to the server, they will be kept in the log located at 192.168.0.1/log.txt. This log file will also contain information about all connections and disconnections, along with MAC addresses.

Installation

To install this program to the ESP8266, it is necessary to install the PString library, the Streaming library, the ESP8266 FS plugin and of course the ESP8266 Board to the Arduino IDE. The filesystem plugin will have to be used for uploading the files in the data folder. Read on how to do this here.

Editing the default captive page

To edit the default captive page, you can unarchive the gzip file index.htm.gz and edit it to your liking. You are then required to use gzip to archive the file and upload them using arduino-esp8266fs-plugin.

Credits

Thanks to https://arduiniana.org for the PString library and the Streaming library. Also thanks to espressif for the arduino-esp8266fs-plugin and the esp8266-core. These helped a ton.

Happy hacking!

Happy testing!

About

This is a ESP8266 program that creates a captive portal and phishes passwords. Not for malicious use, only a proof-of-concept.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages