An Automated Evil Twin Framework designed to impersonate legitimate wireless networks with dnsmasq
and hostapd
. Citrus sets up a foundation for executing Man-in-the-Middle (MITM) attacks. It also has an option to deploy a captive portal using apache2
, complete with a fake credentials page for phishing attacks.
In the future, I plan on updating the captive portal HTML template. Currently, a temporary solution is in place. Until then, you can transfer your own phishing template to /var/www/html/{your_folder_name}
(replace {your_folder_name} with your actual folder name) and modify the line DocumentRoot /var/www/html/temp
in 000-default.conf
to DocumentRoot /var/www/html/{your_folder_name}
for customization
- Python 3
- Linux environment
- current installer supports Debian/Arch based dirstros, for others you have to do it manually.