Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
1answer
990 views

Reassemble sniffed packets [closed]

I am attempting to analyse my WiFi network with on Mac OS X, is there a tool to reassemble TCP stream from Wireshark capture. I would like to see the entire HTML pages that are passing through the ...
2
votes
3answers
6k views

Cracking a wpa2-psk wifi

I'm cracking a wpa2-psk wifi with aircrack-ng. After popullating the *cap file I'll apply brute-force with john. The question is: What time is it recommend to run airodump-ng before killing it's ...
5
votes
2answers
10k views

Estimated cost to make a brute-force WPA2 attack feasible

It's been shown that a brute-force attack on WPA2-Personal is possible in a reasonable amount of time. These successful attacks appear to be limited, however, to researchers who have the budget to ...
-2
votes
4answers
17k views

If a hacker is on the same Wifi Network as I am, what can he do? [duplicate]

Ok so when a hacker has the wifi network's password and gets on the network, he can do things like monitor traffic, catch passwords, even access PCs, etc. But what I'm interested of knowing is what ...
-3
votes
1answer
102 views

Ways to look for changes on a PC [closed]

The other day I got the password for our school's Wifi but even though that's the case, I still can't connect. So I visited the guys at my school's IT department and they said they need to borrow my ...
-3
votes
1answer
1k views

Standard algorithm for WEP key generator 64-bit [closed]

I have downloaded the following function from the internet. It's a WEP Key generator for 64-bit from a giving passphrase. and I m wondering if a such algorithm is a standard algorithm? or it's an ...
6
votes
3answers
4k views

How do WPA/WPA2 cracking programs know when the PMK/PTK is correct?

I'm doing some pen-testing on my home wlan with aircrack-ng and it got me wondering how programs like these(eg. aircrack-ng, cowPatty, pyrit etc) really work. Specially, when performing a ...
5
votes
2answers
2k views

How eavesdropping will be performed how can I prevent from eavesdropping

I believe that eavesdropping in a man in middle attack and the message is passing from the client to server the man sitting at ISP or network hackers can look at what message I am sending. Heard that ...
3
votes
2answers
3k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
2
votes
1answer
3k views

How WEP/WPA authentication works in a WiFi environment?

I'm looking on a clear schema that would explain how a computer connect to an WiFi access point (WEP or WPA in any version (1,2)). The basic schema would be : Computer looks which AP are available ...
6
votes
2answers
4k views

Is it safe to log into my bank website over a public wifi?

Is it safe to log into my bank website over a public wifi (like a coffee shop)? I apologize if this is a really dumb question. I realize that the connection between the browser and bank servers ...
3
votes
4answers
460 views

Is it possible to configure any of wifi protocols so that the network is undetectable?

I am wondering if it possible to configure my DD-WRT router so that the wifi network I am using is undetectable - impossible to tell if there is any network broadcasting even if there are clients ...
5
votes
1answer
761 views

Measuring SNR to detect jammers in Wi-Fi networks

I'm trying to figure out a way to detect a Wi-Fi 2.4 GHz signal Jammer. I am not looking into locating the location of the jammer but rather detect the jamming signal. How do i do so using only ...
0
votes
2answers
768 views

WPS vulnerability scanning for handshakes to detect the attack

I was able to sniff the EAP packets from the attacker machine with a wireless card on p-mode, however i was not able to sniff this data off the user using the same card under windows. Wireshark, did ...
9
votes
3answers
7k views

Security measures for a WiFi access point?

I am planning to purchase a program that comes with an App that allows you to control the program via phone. The developer told me that the connection will be done via an extra WIFI box connecting to ...
5
votes
2answers
2k views

What is the best way to protect a captive portal againt MAC spoofing

What is the best way to protect a captive portal againt MAC spoofing? The MAC Address appears one of the only ways to distinguish wireless clients from one another, anything one authenticated client ...
3
votes
2answers
911 views

Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?

I understand that there are many applications such as Snort that do the job for network layer 3 IDS. From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
8
votes
6answers
2k views

Are smartphones at least as safe as “regular” computers for personal data?

Like a lot of people, I pretty much run my life on the Web these days. I use online bill pay, I shop at Internet retailers, I keep in touch with friends electronically, &c. I'm pretty comfortable ...
3
votes
2answers
2k views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
-3
votes
1answer
868 views

How to use phone's Wifi tethering to demonstrate security vulnerabilities on phones [closed]

I am teaching a course to highschool students about computers, and I wanted to do something different for tomorrow class. I was thinking to teach them about wifi security vulnerabilities through a ...
1
vote
2answers
183 views

Wifi box produces three SSIDs?

While using a friend's wifi, he said I should use his SSID, let's call it XYZ's Wifi. When I started my Macbook Pro, three SSIDs came up. Two were called XYZ's Wifi and the third was called XYZ's ...
-1
votes
5answers
5k views

How can I configure my router to prevent connections bypassing it?

I am trying to configure my router to control access for several of my devices at home. I am currently using a linksys router. Our home consists of three devices (a desktop, a laptop, and a ...
2
votes
2answers
8k views

aircrack-ng under Win7 — possible?

What needs to be installed to get the full aircrack-ng suite (or the closest possible equivalent) working under Win7? Should you use VirtualPC, VirtualBox, or VMware Workstation for this? Should you ...
0
votes
2answers
5k views

What are the methods to crack WPA and WPA2? [closed]

Is there any method other than brute force and dictionary attacks to break WPA and WPA2?
0
votes
3answers
3k views

Is it possible to change the wifi password with a script?

I was wondering if it is possible to change the password for a wifi with a script instead of having to log-in to the routers firmware?
2
votes
1answer
4k views

Wifi login redirect applications

This may sound a bit naive questions as i am a beginner. But I do my best to put it into words. You may have experience when sometimes you want to use the internet in a cafe for example (with your ...
6
votes
1answer
4k views

What makes PINless Wi-Fi Direct using WPS on Android secure?

I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup), and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
4
votes
2answers
2k views

Best way to secure Wi-Fi Direct connection

I have setup WiFi Direct connection between two Android devices by using Wi-Fi Protected Setup (WPS) "push button" for authentication.I also want to secure the connection itself by securing the data ...
1
vote
2answers
2k views

How do I holistically protect a web service from network and MITM attacks?

I have several financial web services that are accessed over HTTPS, however the client devices may be accessing the web services over untrusted WiFi, through questionable proxies, and possibly ToR ...
2
votes
4answers
569 views

Which Wifi encryption method is secure?

you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
8
votes
6answers
2k views

Can my WIFI Home router be brought down to cause me to connect to a fake AP?

I am wondering if this scenario may happen - described from the users point of view: Being connected to my home router, the connection suddenly breaks. So I go to the wireless network adapters drop ...
3
votes
0answers
846 views

What is the most common default security setting on most consumer and small business Wi-Fi routers? [closed]

I am writing a paper right now which involves Wi-Fi security (I'll spare you the details). A major argument in this area depends on the assertion that Wi-Fi routers come defaulted as open networks (ie ...
2
votes
1answer
2k views

How to view which mac addresses are connected to some AP?

I set up an open AP. I know I can view mac addresses of connected users via AP's console (local console). this is not what I need. I use tool like Netstumbler or inSSIDer on my Win 7 machine to see ...
12
votes
1answer
628 views

Can WiFi absorbing wallpaper absorb enough signal to provide a legitimate security benefit?

This French website reports that a wifi-absorbing wallpaper provides a security benefit. Is there any legitimate support for this, assuming that most rooms have windows, and signal can escape from ...
22
votes
2answers
15k views

Strength of WEP, WPA and WPA 2 PSK

I know there are three method for wifi security. What are the relative strengths of the password encryption in WEP, WPA and WPA2 PSK?
6
votes
2answers
807 views

What risks does WPA carry?

A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
4
votes
3answers
615 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
2answers
434 views

Wi-fi security using WPA or WEP

In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
4
votes
3answers
285 views

Security in wireless ad hoc sensor network (without physical access)

I want to know without taking physical access, what are the methods that can steal the data in a node. When talking about eavesdropping, how can an attacker sniff the packets? Do they need to listen ...
0
votes
2answers
1k views

Is a VPN the only way to protect against rogue Wifi access points MITM attacks?

Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions? This question relates to ...
5
votes
2answers
4k views

How is user authentication sent in a public wifi? Radius/802.1x/EAP etc

I visit the airport, I pull out my laptop and connect to a network (no password needed). I open up my browser and i am presented with a screen saying I need to pay to use the network. If I pay, I ...
8
votes
1answer
1k views

Linux wireless hacking book

I am looking for recommendations on a good wireless hacking book. I would like something more focused towards the defensive, but a healthy knowledge of both would be great. I would also need it to go ...
1
vote
3answers
2k views

What devices support the permanent addition of an ARP table entry? What tools are available to manage this?

I would like to improve wireless security and certain other on-net security scenarios with a permanent ARP table entry. The idea being that someone on the same subnet or WiFi network will have a more ...
10
votes
2answers
910 views

Security of unencrypted wireless networks with authentication page

Some wireless networks, such as those offered by hotels and hotspots, are not encrypted (they don't require a pass phrase to connect) but have an authentication web page. For example, you connect to ...
3
votes
2answers
929 views

What additional difficulties are present in performing ARP poisoning on a secure wireless network (WEP, WPA) vs. an insecure one?

I just finished a project in which I coded a man in the middle attack on an unsecure network. I've tried to see how feasible it would be to extend this a secured network. Some internet searching has ...
7
votes
4answers
2k views

How to keep secure while browsing on open wifi when SSL VPN is blocked?

After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
2
votes
1answer
969 views

Comprehensive book to study about wireless technology

I am searching for a comprehensive book on wireless technology that covers in detail almost everything about wireless technology, including the related protocols, security, hacks, etc. I know it is ...
1
vote
1answer
675 views

Designing and managing a captive portal

I'd like to learn more about how a captive portal works, especially the management system regarding usage, security monitoring, billing, security architecture etc. Does anybody know any good ...
1
vote
2answers
178 views

hardware required for wifi security system

i am planning to implement one WIFI security system , in which one can lock or unlock door remotely. As i have serched over internet and i came across lockitron and schlage Now what i want to know ...
5
votes
3answers
2k views

Two SSIDs on same Access point- not good?

If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...