I've heard some people bragging about this and saying they use free internet, but I think it's impossible because there's no internet on the phone, even through Termux: aircrack-ng, hashcat etc.

I mean, I don't know how they do it, maybe they're lying, but if it's possible, then we can safely say that Wi-Fi security is critically low right now.