Usage Guide

EAPHammer is designed to be easy to use, so you should be able to get pretty far using the example based documentation that makes up most of this Readme.

EAPHammer has four modes of operation:

• --cert-wizard - Use this flag to create a new RADIUS cert for your AP (needed for any attack that involves EAP). See: I. x.509 Certificate Generation

• --creds - Harvest RADIUS credentials using rogue access point attack. See: II. Stealing RADIUS Credentials Using EAPHammer

• --hostile-portal - Rapidly steal active directory credentials, perform indirect wireless pivots. See: III. Stealing AD Credentials Using Hostile Portal Attacks and IV. Indirect Wireless Pivots

• --captive-portal - Force clients to connect to a captive portal. See: V. Performing Captive Portal Attacks. Further documentation for each one of these modes can be found in the sections referenced in the list above.

You can access EAPHammer's built in help menus by using either the -h or -hh flags as shown below:

# display basic help
./eaphammer -h

# display advanced help
./eaphammer -hh