Wifiphisher: Fast automated phishing attacks against WPA networks
This looks really cool. However, when I first read the words "social engineering", I expected it to create another access point <i>encrypted the same way</i>, and get the code direct from the victim. This way seems less fool-proof.<p>Is my suggestion at all possible, or is the code transmitted while connecting useless unless you already have it? (Well it's not <i>useless</i>, as it can be brute-forced by aircrack-ng locally. I'm wondering if what's transmitted is like a hash of the passphrase, which isn't useful, or encrypted with a one time key sent by the access point, in which case my idea is much better.)