-
Notifications
You must be signed in to change notification settings - Fork 11
Attacks Karma
Dominik edited this page Jan 16, 2026
·
1 revision
Instead of attacking the router, KARMA targets the client device. Many devices automatically connect to networks they trusted before — this attack exploits that behavior.
Quick start:

- Attacker scans for Wi-Fi probe requests sent by nearby devices
- These probes contain SSIDs of networks the device connected to in the past
- A fake access point is created using one of the requested SSIDs
- Victim’s device connects automatically, without user confirmation
- Attacker can observe traffic, perform MITM, or redirect to a captive portal
1234
📡 KARMA abuses trust — the device believes it’s reconnecting to a known, safe network.