Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
3answers
40 views

Building an info sec VM lab - safe to keep on my home network?

I'm a new member making my first post here. I had a very quick, and admittedly basic, question. I'm setting up an info sec lab for the first time at home. I'm trying to build some more technical ...
2
votes
2answers
110 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
0
votes
1answer
30 views

Can a third party passively read transmissions if WEP / WPA / WPA2 key is known?

If I connect to a WiFi network sporting either WEP, WPA or WPA2 encryption, can someone other decipher my communication he passively received if he knows the network's passphrase?
1
vote
1answer
30 views

wpa_passphrase command encrpyting psk

Does the wpa_passphrase command turn an ASCII string into hexadecimal and what is the benefit of doing so? Is the psk sent in the header of packets? Can it be easy to sniff if it's in a string format? ...
4
votes
2answers
22k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
0
votes
1answer
40 views

How to sniff 802.11 packets without going into monitor mode?

Is it possible to sniff or capture 802.11 packets which sends my computer to the router (AP). I know that I can't sniff packets which have a other destination MAC address without going into monitor ...
-1
votes
0answers
54 views

Windows 8 hacking

Can a Windows 8 machine can be hacked, by only knowing the IP address of the victim, without having first penetrated the Wifi? Say I disable the Wifi altogether and start my computer fresh..is it ...
0
votes
3answers
52 views

How can I protect my WiFi if I have two routers?

I have a main desktop computer in my basement. It is connected to a modem box that my ISP gave me, which is also wireless. They also recommended a stronger wireless router, from Linksys, that would ...
0
votes
1answer
151 views

How to enable WiFi while using two wireless cards one in monitor mode and other in managed mode?

I have two wireless adapters, one is internal PCI wireless adapter (wlan0) while other is USB wireless adapter (wlan1). I put wlan0 in monitor mode and wlan1 is in managed mode. But, after running ...
0
votes
0answers
13 views

How to tell whether a 802.11 DATA packet uses WEP or WPA?

i am playing with the 802.11 header, trying to figure out the encryption type of incoming 0x08(DATA) packets. 1) I capture the 0x08 type packet (DATA). 2) I find out that a WEP bit is set (2nd ...
0
votes
0answers
22 views

Mobile access is blocked on wireless router [on hold]

My corporate wireless router has blocked mobile devices to connect to it and access internet. I can connect my laptop to the wireless and get internet access. But I want to use internet on my mobile ...
3
votes
4answers
30k views

How to know what others browse through the network?

My friend connected to WIFI and after 5 minutes he told me which sites I had actually been browsing, and who I chat with. My question is: how do I defend myself against this, and also how did he do ...
3
votes
2answers
71 views

As an end user on a network, how can I avoid being MITM'd by an SSID-spoofing device?

I've been looking at SSID spoofing devices lately, including the Wi-Fi Pineapple and similar hardware. While these types of devices seem very useful to someone who's up to no good or working as a ...
1
vote
1answer
110 views

Can Passpoint X.509 certificates be used to MITM SSL connections on Passpoint networks?

Passpoint/Hotspot 2.0 public networks like LinkNYC require users to install X.509 certificates, for EAP authentication. Can these certificates be used by the provider to execute man-in-the middle ...
-1
votes
1answer
57 views

Using old router as wi-fi extender/extra security on shared network?

I just moved into a building with three apartments, all of which split an internet subscription. There is only one router, however, in one of the other apartments. For security/privacy purposes, I'd ...
0
votes
1answer
29 views

Can an AT&T router's firmware be changed to a malicious one just by logging in?

Or would an attacker need to know the special Device Access Code to do that? I can't figure how to set an admin password so would I be vulnerable if a hacker knows my WiFi password? Or would they need ...
4
votes
1answer
50 views

When prompted to add a certificate or profile to connect to a secured WiFi network, how can I tell if it's safe to install it?

Sometimes when I connect to secured WiFi networks on my computer, such as my internet provider's WiFi hotspots around the city, I'm asked to add a certificate to my certificate store. When I'm on my ...
1
vote
2answers
48 views

Sniffing packet on wireless connection (airodump-ng)

Short Question: Is it important for a sniffing device to be in the broadcasting range of a client (NOT THE ROUTER) to sniff its packets? Complete Scenario: I assume that a wireless sniffing tool, ...
1
vote
1answer
48 views

How to make my wireless internet or WiFi device secure for personal use? [duplicate]

Sometimes I have seen that my internet packets are being consumed after all I did not use it but my device is connected and ready for use. So it is due to some other reasons or someone is using my ...
0
votes
0answers
19 views

Should I set up additional security on Xfinity wireless gateway?

My sister has an XB3 model dual band wireless gateway from Xfinity which she is using as a wireless router in her house. She currently has it set up so that it appears as an open network. Access to ...
-1
votes
0answers
56 views

Wash and Reaver issues in kali

I don't know if this is a silly question, but here it goes. I am trying to get my hotspot's password with reaver on Kali 1.0. Monitor mode is on, I see the target network on airodump, But wash isn't ...
2
votes
2answers
68 views

How safe is accessing HTTP traffic(non-SSL) when using VPN and connected to public WiFi?

Suppose I am using public WiFi and connected to my office network through VPN. I am accessing some applications which are not SSL enabled. How easy it is for an attacker to see the traffic if he is ...
1
vote
2answers
56 views

Cannot capture frames other than broadcast or multicast in Wireshark

My problem is that I cannot capture any frames other than broadcast or multicast over Wireshark on my WLAN interface (eg. no ICMP packets, no HTTP packets, etc.) Please follow details below: OS: ...
13
votes
4answers
355 views

What to look for in baby monitor?

There are, from time to time, stories in the media about baby monitors being hacked. The hacker can for example gain access to the video feed and be able to interact with the monitor. While I ...
0
votes
1answer
26 views

How effective is MAC whitelisting on a Wireless Access Point?

For the sake of context, let's say I set up my home router with WPA2, a strong passphrase and I whitelisted all of my devices. I know the data is encrypted, but is the layer 2 header encrypted as ...
0
votes
1answer
90 views

airodump-ng mon0 device

My laptop is in monitoring mode. I need to get the details of a client that makes probes and not include other bssid and their station. I run sudo airodump-ng -w s3 --bssid 74:de:2b:45:ed:d4 mon0 ...
0
votes
1answer
49 views

Employee privacy when using company iPhone on own Wi-Fi

If I use a company iPhone on my own home Wi-Fi, does the employer still have visibility on activity? If so, how much assuming there are no hidden keylogging programs.
0
votes
2answers
84 views

Cracking WI-FI keys offline at distance?

Let's suppose I was able to get a handshake from my target's network ready to crack, but would like to crack the password far away from that network location. Would it be possible, or do I have to be ...
16
votes
2answers
3k views

How to force clients to connect to WiFi automatically?

I have watched a hak5 YouTube that they did make people connect to their wifipineapple (a WiFi Honey pot) , and they stored the Wi-Fi hotspots, those the phone used to connect to. The historical ...
4
votes
2answers
474 views

Httpclient redirect in coffee shops

In some coffee shops that offer free WiFi (for instance Starbucks), I have noticed that attempting to use HTTP or HTTPS fails unless you accept a notification (on Windows at least) which looks ...
0
votes
2answers
48 views

How secure is LAN wireless 802.11 if password is used with access point?

I've read a book on computer networks, and among other subjects the author touched WiFi security. It was said that WiFi has some serious security flaws and that there is even free publicly available ...
2
votes
1answer
212 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
5
votes
1answer
213 views

What about Long Router Passwords and WPS Push-Buttons

I have a question related to the WPS push-button capability on my router. I know that there is some material on the web about this question, but I haven't found anything that's current enough for my ...
2
votes
4answers
166 views

it is possible to make some wifi router out of service without have the connection password?

Lets say i want to make some WiFi router out of service. I can connect to the router and close the WiFi connection or change the password. But in this case i need to have full access to the router. ...
1
vote
0answers
33 views

Is AirPlay at attack vector into a private network?

Our software dev team has an Apple TV and we want to have it connected to the corporate network to be able to reach internal resources while testing custom apps. Our ops team does not want it ...
3
votes
1answer
74 views

How are WPA2 passwords encoded?

I'm trying to figure out a good John The Ripper rule for WPA2 that won't waste time testing impossible passwords. Thus the question - are there any limits on what's allowed in a WPA2 password? Can it ...
0
votes
0answers
52 views

ARP spoofing on WLAN: seeing only traffic coming back

I am attempting to capture network traffic of my mobile device connected to switched network via WIFI, utilizing arpspoof. I did all steps tutorials mention. What I see in Wireshark is only a half ...
0
votes
1answer
1k views

Detect possible router attack attempt

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 [...
1
vote
1answer
36 views

What does it mean when airodump-ng shows 0 beacons?

I have one particular AP that shows 0 Beacons in airodump. I can see the beacons in all the other AP without a problem. So is it even possible for AP to not send beacon frames?
-1
votes
2answers
73 views

Spying through wifi by the person who sets up wifi [duplicate]

A friend of mine has set up WiFi on my PC, knows the password for the WiFi and knows my WiFi id. How and to what extent can he spy on my PC? And can he see the sites I visit?
5
votes
4answers
15k views

Wifi penetration testing: Why aireplay-ng de-authentication does not work?

I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine. ...
0
votes
3answers
3k views

Is my WiFi and computer hacked?

Yesterday, I woke my computer up from sleep mode (it had been on all day while I was at work). And my browser was open to an email account that was not mine. Is it possible that someone hacked my ...
3
votes
4answers
317 views

Is a computer more vulnerable if wireless is left on when booting?

Normally I switch off wireless on my laptop before I shut it down but I forgot to do this last night. So this morning, after I booted up the laptop, I saw the wireless notification on the bottom right ...
0
votes
2answers
187 views

Detecting access point model

Is there any way to detect the model (brand, reference, ...) of a reachable wireless access point without having to connect to it? I've tried sniffing packets with Wireshark, but I can't get the ...
1
vote
1answer
89 views

Can the router admin page be faked by an attacker?

This is just for my curiosity regarding securing the router. I understand all the things such as securing password, encryption, update firmware etc etc. But I was just wondering could the router ...
0
votes
0answers
24 views

How to tell if a hotspot is encrypted with Passpoint on iOS

Is it possible to see if a hotspot is using WPA2 encryption as part of the Passpoint protocol on iOS? If I understand it right you'll connect to the hotspot without needing to enter a WPA2 PSK, but ...
4
votes
1answer
89 views

Tracking down rogue wireless device on network

I have an unknown device that is connecting to my wifi router, and can't figure out what it is to save my life. I've never seen it before and haven't bought any new devices lately, it seems to have ...
6
votes
1answer
10k views

How does Dumpper program get default WPS without bruteforcing them?

Today I tried a program called Dumpper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of ...
15
votes
8answers
87k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like WhatsApp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
2
votes
0answers
794 views

Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?

I have followed a tutorial here: http://ebnj.net/sshoverdns/ This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS. This guides us to ...