Security for 802.11 wireless networks.

learn more… | top users | synonyms

13
votes
9answers
25k views

Tracking down a rogue access point

Over the course of about a month we have received multiple reports of a rogue access point attempting to intercept traffic. I suspect an attacker is using a wifi pineapple, or similar hardware ...
9
votes
3answers
927 views

Public wifi security protocols

I should apologise first- this post could seem a lot to ask for, but I am starting to go around in circles. I am interested in securing my laptop for when I use public wireless hotspots, as I am a ...
9
votes
2answers
629 views

How to implement secure device identification in a for-pay wifi router to prevent usage fraud?

After reading this question about how for-pay wifi routers identify specific devices it got me thinking about what a secure alternative might be. I know that certain research has focused on ...
10
votes
3answers
6k views

Do my Android apps use TLS or other encryption when connected to public Wifi? How can I tell?

I have an Android phone. When it's connected only to my carrier's 3G network I imagine it's reasonably secure against eavesdropping (although not invulnerable). However, at times due to lack of ...
2
votes
3answers
394 views

Sniffing the sniffer

A sniffs B while B is sniffing C. What's the traffic in A? Does A catches both B and C traffic or only B's?
4
votes
1answer
1k views

Is a public known password protected Wifi more secure than one without a password?

When connecting to a public Wifi from a café for example, some don't use a password and some do. If they do use a password it is often publicly known to everybody around. Does having a password on ...
2
votes
3answers
6k views

intel wireless 5100 AGN adapter to support injection

i ran aireplay-ng -9 wlan0 and it seems that my intel PRO/Wireless 5100 AGN adapter does not support injection. i use Ubuntu 10.10 64bit (2.6.35-25-generic kernel). is it possible to make the adapter ...
21
votes
4answers
7k views

Are WPA2 connections with a shared key secure?

This is something that has been bugging me for quite some time: when I have a wifi access point with WPA2 encryption and I give out the key, how secure are the connections? With WEP you could easily ...
6
votes
2answers
7k views

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
1
vote
3answers
756 views

Preventing 3rd party DNS Servers from being used

While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly. This would seem ...
7
votes
2answers
3k views

Dictionary Attack on Wifi

I know a few people with pretty weak passwords. What kind of systems exist to prevent dictionary attacks? Would it make sense to restrict the number of connection attempts in a certain timeframe? ...
10
votes
2answers
773 views

When are HTTP session cookies at risk over Wi-Fi?

If I'm using websites that do not use HTTPS, but I'm on a WEP-protected Wi-Fi network, are my cookies safe from being sniffed by third-parties? Are cookies only at risk during login, or am I at risk ...
8
votes
6answers
600 views

Doing a demo about open wireless networks exploiting with Firesheep

A collegue and I have been asked to do a demo where we show off stealing Facebook sessions with Firesheep. I've never used Firesheep before myself, but I reckon it should be a simple task. I know the ...
3
votes
1answer
25k views

How long to brute-force WPA password?

Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word. Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
3
votes
1answer
498 views

WPA vulnerabilities for pentest

As I am a network&IT enthusiast, I was asked by a friend to pentest his WPA network. I'm wondering if there is anything else I can do beside a bruteforce attack, trying the KARMA attack on ...
12
votes
2answers
5k views

Can an attacker sniff Mac addresses on a wifi?

If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
10
votes
4answers
2k views

How can an access point spoof me into connecting?

I was reading through the answers of the question "How can I ensure that I connect to the right wireless Access Point?" and was wondering how it is possible for an access point to imitate another wifi ...
1
vote
3answers
319 views

Is there a security problem accessing my laptop via WIFI?

I'm developing a web application for mobile devices on my local server in my laptop. My laptop is connected to company network via LAN. And, my project manager, wants to check the web application ...
4
votes
4answers
663 views

What particular concerns should one bear in mind when wardriving?

I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks. Right now, I'm still in the planning stages of this ...
7
votes
1answer
4k views

Obtain credentials by spoofing WPA/WPA2 Enterprise network?

I have a large scale wireless network secured using WPA/WPA2 Enterprise authentication. Recently, I was made aware of the possibility that someone may use a dd-wrt router and a computer to spoof the ...
7
votes
1answer
1k views

Deploying a campus WiFi network that authenticates against an AD LDAP

We are looking to deploy about 15-20 Cisco 1131ag access points on campus. I have been reading up on different authentication methods, but I don’t know what will be the best long term solution that ...
12
votes
3answers
6k views

How does FaceNiff work?

FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
15
votes
4answers
2k views

Threat assesment for a captive portal

I am interested in setting up a captive portal on a wireless network. From what I understand I would do this by initially having all guests in a temporary vlan, moving them to the real vlan when ...
0
votes
1answer
118 views

WLAN Router authentification [duplicate]

Possible Duplicate: How can I ensure that I connect to the right wireless Access Point? Is it true, that WLAN routers aren't authenticated by clients? The only "authentication" is SSID and ...
7
votes
1answer
869 views

How to get hold of and use WPA session keys?

I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
11
votes
1answer
4k views

Is WPA2 WiFi protected against ARP poisoning and sniffing?

Is WPA2 WiFi protected against ARP poisoning? If not, can the ARP poisoner decrypt the packets?
19
votes
1answer
1k views

WPA significantly less secure than WPA2?

I understand at least theoretically WPA2 is more secure than WPA, but in practice does it make any difference which one you use? From what I know there are no known attacks for either except for ...
6
votes
3answers
793 views

wlan security - why is it not possible to protect against deauthentication flooding

Wireless security (Wikipedia) describes security issues due to the fact that wi-fi deauthentication packets are unencrypted: Weak PSK passphrases can be broken using off-line dictionary attacks by ...
6
votes
2answers
3k views

Wireless hardware with limited range?

I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity? Several sources have recommended WPA2, but I'd still ...
6
votes
1answer
166 views

Wireless auto-join on laptops

Maybe I have the wrong idea but this is a question that has been floating in my head for some time. Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
7
votes
2answers
12k views

In inSSIDer, what is the difference between WPA2-CCMP and RSNA-CCMP?

inSSIDer shows my wireless network as RSNA-CCMP. The settings on the wireless router (Linksys E2000) do not at all seem to suggest an "RSNA" security option. The security filtering options in ...
1
vote
1answer
312 views

Wireless Access Point security with TEW-638APB

We have a large network that is private, with both eithernet and Wifi access. We'd like to make another smaller network that is wireless, open, and possibly throttled, and not able to access our ...
8
votes
2answers
1k views

What security risks do unauthorized mobile hotspot (MiFi) devices on company proprerty pose?

I'm having some difficulty determining how, or if, MiFi devices on property should be regulated. Personally, I see them as having little difference from any other rogue AP in the environment - the ...