[hunt3r972]

So let's say I have a WPA2 network named "linkgear". Would it be possible for a cyber criminal to obtain my WPA2 key by creating an evil twin "linkgear" AP which uses WEP passphrase authentication instead of WPA2. Then persuade/force my client devices and their human operators to attempt to connect to the evil "linkgear" AP with the real "linkgear"s WPA2 key, thereby performing a caffe-latte attack? It would rely on a little user ignorance as they would have to type the WPA2 key but 95% of the population would think absolutely nothing of it.

In this case the thing I would do gonna be:
1. Creating the linkgear fake AP with open encryption
2. DeAuth you from the real to make your computer connect to the fake one
3. Run a apache/PHP/mysql server hosting a page that will tell you "Your router has been updated. Enter your WPA2 key to activate internet" or something like this. The password will be sent to my mysql database with a short php script
4. Redirect your traffic to my hosted page when you'll try to go to google.com for example
5. Wait until you enter the key
6. Stop DeAuth so you will reconnect to the real AP
7. Take your WPA2 key in my mysql database and use it to connect to your AP

This is evil twin attack