1. Victim is being deauthenticated from her access point. Wifiphisher continuously jams all of the target access point's wifi devices within range by sending deauth packets to the client from the access point, to the access point from the client, and to the broadcast address as well.
2. Victim joins a rogue access point. Wifiphisher sniffs the area and copies the target access point's settings. It then creates a rogue wireless access point that is modeled on the target. It also sets up a NAT/DHCP server and forwards the right ports. Consequently, because of the jamming, clients will start connecting to the rogue access point. After this phase, the victim is MiTMed.
3. Victim is being served a realistic router config-looking page. wifiphisher employs a minimal web server that responds to HTTP & HTTPS requests. As soon as the victim requests a page from the Internet, wifiphisher will respond with a realistic fake page that asks for credentials, for example one that asks WPA password confirmation due to a router firmware upgrade.

Targeting an access point

A successful attack

Fake router configuration page

• Kali Linux.
• Two wireless network interfaces, one capable of injection.

• 1) Create accounts
• 2) Delete all accounts for a given user
• 3) Send friendship requests (Test Accounts)
• 4) Accept friendship requests (Test Accounts)
• 5) Connect all the accounts of the database
• 6) Link Preview hack (Simple web version)
• 7) Link Preview hack (Youtube version)
• 8) Youtube hijack
• 9) Private message, Link Preview hack (Simple web version)
• 10) Private message, Link Preview hack (Youtube version)
• 11) NEW Like flood
• 12) Publish a post as an App (App Message Spoof)
• 13) Bypass friendship privacy
• 14) Bypass friendship privacy with graph support
• 15) Analyze an existing graph
• 16) Link to disclosed friendships
• 17) Print database status
• 18) Increase logging level globally
• 19) Set global login (Credentials stored in memory - Danger)
• 20) Print dead attacks :\'( 
• 21) Send friend request to disclosed friend list from your account
• 22) Bypass friendship (only .dot without graph integration)
• 23) Note DDoS attack
• 24) Old Like Flood (Not working)
• 25) NEW! SPAM any fanpage inbox
• 26) Bypass - database support (Beta)
• 27) Logout all your friends - FB blackout 
• 28) Close the application

ProRat is one of the best Remote Administration Tool which can be used to easily hack any system and there are other features described below..

***** Do at your own risk ****

Step 5 : Now Open General settings. This tab is the most important tab. In the check boxes, we will choose the server port the program will connect through, the password you will be asked to enter when the victim is infected and you wish to connect with them, and the victim name. As you can see ProRat has the ability to disable the windows firewall and hide itself from being displayed in the task manager. Just follow the steps as shown in the figure.