(untitled)

I know a wifi network where many people connect to a website with TLSv1.0 and send packets towards it, containing usernames and passwords. The wifi network uses WPA2-PEAP-MS-CHAPv2 authentication. Some other info about the website's encryption: | ciphers: | TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A | TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A | TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A | TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A No client certificate CA names sent Peer signing digest: MD5-SHA1 Peer signature type: RSA Server Temp Key: DH, 1024 bits Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated I tried talking to the people in charge to fix this but they wouldn't listen. I'm too dumb to haxx0r this myself though. I tried searxing the clearweb to find anything useful but most I could find was how to decrypt packets if you already have the private key or the pre-master key(no soykaf). Thus I've come here if anyone knows and is willing to help me pentest this. I thought putting the wifi details in this post would be useful given a MITM attack being possible because of it.

>>16122 You actually unknowingly answered your own question. MITM is your goal and if you don't have the skills or the patience to crack the password you can actually get it through MITM too. Fluxion and its large premade phishing login pages may be what you exactly need. https://github.com/FluxionNetwork/fluxion Good luck lain.

>>16124 *large collection of premade phishing login pages following the visual identity of various routers web interfaces

>>16122 there are a bunch of tutorials on how to crack this soykaf. the easiest way is to use freeradius-wpe: https://depthsecurity.com/blog/when-802-1x-peap-eap-ttls-is-worse-than-no-wireless-security

>>16122 >I tried talking to the people in charge to fix this Fix what exactly?