Would a EAP GTC ... Downgrade useful ?

[minanagehsalalma]

Look
sensepost/mana#104
I think
It would be use to get rid of the captive portal and hsts / DNS headache !!

[strasharo]

Irrelevant.

[minanagehsalalma]

@strasharo why is that ??! isn't fluxion meant for "MITM WPA attacks"

we can set the radius config to accept any username... just the password is what is will be checked using the wpa handshake ?!

[strasharo]

You have the source, feel free to set whatever you want.

[minanagehsalalma]

if i could i would .. but i opened this issue cause i can't..

…

On Tue, Feb 19, 2019, 9:33 AM strasharo ***@***.*** wrote: You have the source, feel free to set whatever you want. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#694 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/ATmETpioP7c7Q47Db5UqLXr1vnG_BX6Tks5vO6i0gaJpZM4a__Qi> .

[minanagehsalalma]

@strasharo i have found this script that

[+] Evil Twin - Creates a Fake Access Point, Clients Connect to Divulging MSCHAP Hashes or Cleartext Passwords

i hope you add the feautre