ESP32FakeAP

<p align="center"> <img width="399" alt="immagine" src="https://raw.githubusercontent.com/TheKevinWang/ESP32FakeAP/main/FakeAP/esp32_fakeap_bing3.jpg"> <br> Bing Ai generated picture - "A hacker is using an ESP32 to broadcast a fake wifi access point. Logo" </p>

By hosting payloads using files instead of inside .c files like many other ESP32/ESP8266 projects, it's a lot more adaptable and usable.

Arduino IDE installation

Download and unzip the following into your arduino libraries directory (~/Documents/Arduino/libraries by default on windows; mkdir if not exit):

https://github.com/me-no-dev/ESPAsyncWebServer

https://github.com/me-no-dev/AsyncTCP

Then install this:

https://github.com/me-no-dev/arduino-esp32fs-plugin

Make sure to hit Tools->ESP32 Sketch Data Upload after uploading firmware to upload the static web files.

Example

By default, the wifi SSID is "Free Guest Wifi" and it is an open AP. All dns requests are redirected to the local webserver.

The example phishing payload is for a Broadcom firmware update based on wifiphisher's fake router configuration page. Replace the "hello world" data/broadcom-wifi-3.0.12.i586.exe with your payload.

TODO

Add credential phishing

Add deauth and evil twin AP mode

Disclaimer

Only use this for security testing with permission.