Configuring evil-twin AP with different 802.11 protocols

802.11b (wifi 1)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi1 --channel-randomiser

802.11a (wifi 2)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi2 --channel-randomiser

802.11g (wifi 3)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi3 --channel-randomiser

802.11n (2.4GHz) (wifi 4)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi4 --channel-randomiser

802.11n (5GHz) (wifi 4)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi4 --freq 5 --channel-randomiser

802.11ac (wifi 5)

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi5 --channel-randomiser

802.11ax (wifi 6)

The wifi6 profile defaults to the 5GHz band. Use --freq 2 to run on 2.4GHz instead.

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi6 --channel-randomiser

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi6 --freq 2 --channel-randomiser

802.11ax on 6 GHz (Wi-Fi 6E):

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi6 --freq 6 --channel-randomiser --country AU

Note

On 6 GHz, open and WPA2 are forbidden and PMF is mandatory. rogue auto-maps the requested auth: open becomes OWE, and wpa-personal / wpa-enterprise are upgraded to WPA3 (SAE / EAP-SHA256). wep is rejected. The 6 GHz channel randomiser uses the Preferred Scanning Channels.

802.11be (wifi 7)

The wifi7 profile enables EHT (802.11be) on top of HE. It defaults to the 5 GHz band; use --freq 2 or --freq 6 to change band.

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi7 --channel-randomiser --country AU

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open --preset-profile wifi7 --freq 6 --channel-randomiser --country AU

Note

Wi-Fi 7 (EHT) mandates WPA3/OWE + PMF on every band (not just 6 GHz), so rogue auto-maps the requested auth exactly as it does on 6 GHz: open -> OWE, wpa-personal / wpa-enterprise -> WPA3, and wep is rejected. 320 MHz and multi-link operation (MLO) are not yet supported; EHT runs at the per-band HE width (e.g. 80/160 MHz).

Manual 802.11 configuration

Instead of using the --preset-profile argument as a shortcut for pre-configured 802.11 protocols, the various 802.11n arguments can be invoked directly at runtime. This allows for great control over the 802.11 configuration being used.

sudo python3 /opt/rogue/rogue.py -i wlan0 --auth open -hm ac --freq 5 -c 36 --htmode 2 --require-ht --wmm-enabled --require-vht --disable-short160

Custom hostapd-wpe configuration

The --manual argument allows an external hostapd-wpe.conf file to be used to configure the hostapd-wpe component. This is different to manually configuring the 802.11 settings, as rogue is still used in the alternative methods to dynamically generate the hostapd-wpe.conf file.

When --manual is used the authentication method is detected from the supplied file, so dependant services (such as freeradius for wpa-enterprise networks) are started correctly. --auth is optional here, but if supplied it must match the method detected in the file or the job is aborted.

sudo python3 /opt/rogue/rogue.py -i wlan0 --manual /opt/rogue/tmp/hostapd-wpe.conf