What is one way a honeypot can be used to launch a man-in-the-middle (MITM) attack to wireless clients?

Question

Options

• AIt uses ARP poisoning to disconnect wireless clients from the legitimate wireless network and force
• BIt runs an NMap scan on the wireless client to find the client's MAC and IP address. The hacker
• CIt uses a combination of software and hardware to jam the RF band and prevent the client from
• DIt examines wireless clients' probes and broadcasts the SSIDs in the probes, so that wireless

• B
  2% (1)
• C
  4% (2)
• D
  95% (52)

Explanation

A honeypot in the context of wireless networks is a rogue access point (AP) set up by an attacker to lure wireless clients into connecting to it, often to steal credentials, intercept traffic, or launch further attacks. A man-in-the-middle (MITM) attack involves the attacker positioning themselves between the client and the legitimate network to intercept or manipulate traffic. Option D, "It examines wireless clients' probes and broadcasts the SSIDs in the probes, so that wireless clients will connect to it automatically," is correct. Wireless clients periodically send probe requests to discover available networks, including SSIDs they have previously connected to (stored in their Preferred Network List, PNL). A honeypot AP can capture these probe requests, identify the SSIDs the client is looking for, and then broadcast those SSIDs. If the honeypot AP has a stronger signal or the legitimate AP is not available, the client may automatically connect to the honeypot AP (especially if the SSID is in the PNL and auto-connect is enabled). Once connected, the attacker can intercept the client's traffic, making this an effective MITM attack.

No community discussion yet for this question.