Flipper Zero Wi-Fi Marauder Tutorial Demonstrates Evil Portal Credential Capture

Summary

The tutorial demonstrates using a Flipper Zero with an ESP32 Wi-Fi Marauder board to create a fake Wi-Fi login portal and capture credentials entered by a connected user.

Key points

The presenter demonstrates an Evil Portal with a fake Facebook login page that captures submitted email addresses and passwords.
The setup uses a Wi-Fi development board flashed with Marauder firmware and an app installed on the Flipper Zero.
The tutorial shows scanning for a nearby access point, selecting it, and setting up a fake network and login portal.
A phone connects to the demo network and submits credentials, which appear on the Flipper Zero.
The presenter warns viewers not to use the technique against other people and frames the demonstration as cybersecurity learning.

Article Details

Topics: [00:00] Demonstration of an Evil Portal capturing credentials through a fake login page
[01:11] Overview of the tutorial's Flipper Zero and Wi-Fi Marauder setup
[02:00] Flashing Marauder firmware onto the Wi-Fi development board
[04:04] Installing the Marauder app on the Flipper Zero
[05:43] Uploading a login page and selecting a nearby access point for the demo
[08:16] Connecting a phone to the fake network and observing captured credentials

MITRE ATT&CK

T1056.003 · Web Portal CaptureThe demo uses a fake Wi-Fi portal to present a credential form and capture the email and password entered by a connected user.

Summary

Key points

Article Details

MITRE ATT&CK

Related Articles