Security for 802.11 wireless networks.

learn more… | top users | synonyms

3
votes
1answer
155 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
1
vote
1answer
357 views

Dumpper and Jumpstart for hacking WPS

As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them. But with another tool called Jumpstart, together they can crack any AP that is running ...
36
votes
6answers
174k views

If someone hacks my wi-fi password, what can they see and how?

If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
7
votes
1answer
112 views

Triangulate a mac adress

Last Sunday my iMac was stolen by a burglar. On Monday it showed up on 'find my mac'. Good police work and a lot of luck ended up in me retrieving my device that was on a location more than 50 meter ...
0
votes
2answers
105 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
1
vote
2answers
278 views

Do WiFi passwords remain accessible significantly after logging in?

"... they'll go to the taskbar and look at the properties of the WiFi router to get the password." is a quote from another question on this site, and is in the context of WiFi passwords. The ...
1
vote
1answer
26 views

Network authentication using router firmware scripting [closed]

To connect to internet in our institute, you need to login with your credentials on a page and then approve the IP address for proxy less usage. On a router, if one device authenticates, all the other ...
-1
votes
1answer
45 views

Internet security. Wifi vs Ethernet

Home office: The security risks of using wifi for an at home business vs using Ethernet connection? Office: Would the security concerns be different or more concerning at an actual office of store? ...
1
vote
3answers
333 views

Security risk of connecting one mobile device to another mobile device's hotspot

Is there any risk when connecting an Android Phone to a [Verizon] iPhone's Hotspot? If there are I'd like to know about solutions. The Android Phone will basically be tapping the data plan of the ...
1
vote
3answers
8k views

Does rooting an Android Phone make it Vulnerable? [closed]

If android os in a device is rooted , will it be safe to use it in public networks where possibilities of attacks is more.
1
vote
0answers
26 views

MAC spoofing under a OPN Access point HTTP does not work

I want to do a demo on the wifi security. So, I have one Wifi router and two client. I configured my router without security (OPN) and with a MAC filter. One of the two client is connected to the ...
0
votes
1answer
85 views

How can an attacker eavesdrop on users in public WIFI?

I want know why it's said that public WIFI is not safe for banking transactions or entering password for online accounts etc. I want to imitate an attacker and try to harvest as much information as I ...
3
votes
2answers
3k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
0
votes
0answers
28 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
20
votes
4answers
3k views

Is HTTPS secure over public Wi-Fi with an expired certificate?

I am staying at a hotel with free public Wi-Fi. To get Internet access I had to visit a web page and agree to the terms and conditions. This website has a security certificate, but it expired over a ...
2
votes
0answers
29 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
5
votes
3answers
9k views

How does WEP wireless security work?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless security. From this Wikipedia article I have got a basic Idea. But what is the initialize vector? Is some kind of ...
-2
votes
2answers
135 views

Connect to a Wi-Fi modem without password [closed]

I want to know if I can put my laptop MAC address to my Wi-Fi router and when my Wi-Fi password changed, connect to my router without entering new password? I use TP-link router.
0
votes
2answers
84 views

Sniff Wi-Fi network traffic

With Airodump I can see Wi-Fi networks and clients associated to them. I know password to this Wi-Fi networks. Is it possible to dump encrypted traffic between AP and client (WPA2) and then decrypt it ...
1
vote
1answer
54 views

How safe is it to use a Linksys WAP54G Access Point?

I have a Linksys WAP54G v1 device that I want to use to create a second WiFi network. The device is configured for WPA2-Personal, AES encryption with a random 64 character paraphrase. The firmware ...
0
votes
0answers
49 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
1answer
133 views

Android devices are unable to connect to Rogue Acces point created using Airbase-ng

I have created a rogue access point using airbase-ng, but I can't connect to it using my android phones (note II, S4), when I tap on the access point all I get is: Obtaining IP address...', than ...
8
votes
3answers
39k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
4
votes
3answers
135 views

it is possible to make some wifi router out of service without have the connection password?

Lets say i want to make some WiFi router out of service. I can connect to the router and close the WiFi connection or change the password. But in this case i need to have full access to the router. ...
4
votes
1answer
4k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
2
votes
2answers
64 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
0
votes
1answer
88 views

how to catch a packets from wifi that I am connected to ( or not connected to )? [closed]

I have wifi connection, and I want to use something like wireshark to catch all the packages that my wifi router is listening to. How can I do it? If i want to catch packets from the router that I ...
3
votes
0answers
65 views

Broadcasting 10k SSIDs

How hard would it be, and or is it possible, to configure a router or PC to broadcast ten thousand SSIDs. If it is possible what repercussions would it have? Would this be a form of DOSing or is there ...
0
votes
1answer
34 views

Is there a way when using WIFI to know the specific users computer ids?

When you use WIFI is there a way to know the other users computer ids and MAC addresses? What other WIFI users can know about you when you share same WIFI?
23
votes
2answers
10k views

How does WiFi password cracking work?

Let's say I have a wireless network that is password protected. What procedures can an intruder take to gain access to my wireless network, or at least be able to decipher the packets I am sending ...
24
votes
7answers
11k views

Can a WiFi access point operator tell that I'm streaming video to my phone?

I work at an office typing numbers into a computer. It gets quite boring sometimes, so I go on Netflix while using their WiFi on my phone. Can they tell what apps I'm using, based on network traffic? ...
6
votes
7answers
2k views

What security risks exist in cell phone apps' data transfer?

Smartphones apps transfer various types of data over the provider's data network (or wifi, if enabled). What security risks are there in this transfer, and how can the risks be mitigated? I'm not ...
11
votes
3answers
1k views

Why is my phone connection secure without a password when WiFi is not even with a password?

When I talk on the phone or send text messages, I never need to type a userid and password. But when I use WiFi I need to use a password. How is the phone connection secured without a password, and ...
1
vote
1answer
62 views

Can username/passwords be intercepted on an App using public wifi?

I use the ADVFN finance app for stock prices every morning on the public wifi on my train to work. This requires me to login with my username and password on the app(which are saved). Do apps provide ...
0
votes
4answers
306 views

How can I remove an unknown device from my wifi network?

I have an OnHub (from Google), and there is a device I don't know on my wifi network. Is there some way for me to kick it, or DDoS it, whether through some command line command on windows or ubuntu, ...
0
votes
1answer
48 views

How to speed-up data collecting of WEP AP for aircrack?

I'm using aireplay to collect some data from AP alongside with aircrack. Unfortunetlly, the proccess seems quite slow to me as I've reached 2000 in more than 20mins so far. What most affects the speed ...
1
vote
1answer
132 views

How to optimize cracking speed with Reaver

When testing network security with Reaver in order to find out WPS, what parameters do you usually use with respect to cracking speed? I've chosen for TP-LINK Archer C20i AC750 Dual Band a delay of ...
43
votes
9answers
7k views

Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?

There are many open Wi-Fi hotspots scattered around from cafes to airports. I understand that a non-passworded Wi-Fi leaves traffic unencrypted and therefore available for hackers to read. I also ...
6
votes
3answers
259 views

Protection of eduroam credentials

Recently my educational institution officially switched over from the their own wireless network to eduroam. If I understand correctly from the FAQ, credential authentication is performed on the ...
2
votes
2answers
3k views

WPA/WPA2 networks cracks methods

There are some software that states that can crack WPA networks, however that is not an easy task as the initialization code for WPA2 uses a four-way handshake to properly initialize all of the ...
2
votes
1answer
61 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
2
votes
1answer
46 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a ...
4
votes
3answers
16k views

Is it possible to create a custom login page for your own Wi-Fi hotspot?

How do I create my own open Wi-Fi hotspot/access point with a custom login page similar to those found in commercial hot-spots? The page would be accessible using Windows or iOS, and users would have ...
-2
votes
1answer
75 views

Sniffing or DOS attacks or MIM Attack [closed]

i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
15
votes
8answers
70k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like whatsapp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
0
votes
0answers
115 views

Changing the SSID of the fake AP created by linset

As per the title I described above, I know that linset basically created a fake AP for the victim to connect then steal their Wi-Fi password or any other credentials. What I want to know is how do we ...
0
votes
2answers
1k views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
6
votes
1answer
173 views

How does WifiKill work?

How is possible for Wifi Kill to block someone from using Wi-Fi, even if you don't have access to the router settings and you even don't use MITM (I think)?
0
votes
1answer
99 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
2
votes
1answer
86 views

Does HSTS make using a public WiFi safe?

What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...