Security for 802.11 wireless networks.

learn more… | top users | synonyms

48
votes
2answers
4k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...
6
votes
3answers
197 views

Getting automatically logged in to others session via Wi-Fi

Recently, I experienced a very strange behaviour on our Wi-Fi network: we share a Wi-Fi network using a simple router. One of us pays the bills and he's the one, who got the management account from ...
4
votes
3answers
8k views

How does WEP wireless security work?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless security. From this Wikipedia article I have got a basic Idea. But what is the initialize vector? Is some kind of ...
1
vote
1answer
43 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it ...
6
votes
2answers
351 views

Can network admin detect port scan on a certain host?

Say, my laptop is connected to a large WiFi network with many other users. If a port scan is run on my IP by somebody else on the same WiFi network, is it possible for the network admin (or anybody) ...
2
votes
1answer
50 views

Isolate Android system when connected to wifi

Is there any built-in feature or application that isolates the system when it's connected to a wlan, so that just a determined app has access to the net? For example, let's say that you want to ...
2
votes
1answer
91 views

What is the difference between key mechanism in wep and wpa

I haven't found the resources explaining about exact authentication mechanism about wpa-psk in the internet. finally i found securitytube videos i found one video regarding the wpa-psk concepts.in ...
-2
votes
2answers
78 views

Is it possible to locate wifi routers not in your range? [closed]

For example, would it be possible for someone to sit at home, and still see broadcasting networks within a radius of lets say, 50-100miles.
2
votes
1answer
206 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
0
votes
1answer
637 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
4
votes
2answers
689 views

I tried to break my WiFi: is 8 uppercase letter strong enough?

My Wi-Fi WPA-PSK password looked pretty weak: 8 uppercase letter. I have checked with another router from the same provider and the pattern is the same. To see how weak this is I tried to hack it ...
0
votes
2answers
3k views

Wireless Adapters for Testing with BackTrack

I would like to begin testing and working with BackTrack. I have heard that the Alfa AWUS036H wireless adapter works well with BackTrack and allows for packet injection. This adapter, however, is ...
7
votes
2answers
301 views

If WPA2-PSK is insecure, what other options do home users have?

from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
-5
votes
2answers
142 views

If someone hacks my wifi connection what if any control do they have over radio waves in my house? [closed]

A couple questions on wifi security. If someone knows my wifi password (be it WEP or WPA) what kind of control do they have over radio waves? Can they emit radio waves from computers on my network? ...
0
votes
1answer
87 views

What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]

I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...
0
votes
1answer
105 views

can my internet provider see my communications? [duplicate]

Can my ISP see what i am communicating through Skype, Facebook, Yahoo-Mail and so on? I am not asking this from a legal perspective, but only from a technical one. Also I am not talking about ...
6
votes
2answers
161 views

Protection of eduroam credentials

Recently my educational institution officially switched over from the their own wireless network to eduroam. If I understand correctly from the FAQ, credential authentication is performed on the ...
1
vote
2answers
64 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
1
vote
1answer
91 views

Login on public Wi-Fi networks using HTTPS [duplicate]

Is it safe to log in to my e-mail account with my iPad's Safari through a public Wi-Fi network (let's suppose someone is eavesdropping the traffic) provided that the e-mail provider uses HTTPS?
19
votes
4answers
2k views

Is a VPN really required with free Wi-Fi on a train?

Our local train service has added free Wi-Fi. I have been checking GMail and logging into a few apps. Then logging into websites using HTTPS. Is this secure, especially if done via app? The network ...
3
votes
1answer
51 views

Least riskiest option when it comes to reinstalling the OS

I understand security is a continuum rather than a binary, which is why I'm asking this question. I need to reinstall the OS on my Macbook. However, after a security mishap, I’m far more alert about ...
1
vote
0answers
258 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
1
vote
1answer
77 views

Bluetooth/WiFi Identity tracking in public spaces - How to discover?

Your unique mobile device WiFi MAC addresses as well as your Bluetooth unique address can give away enough information to identify you and track your location in public spaces even if you don't ...
3
votes
1answer
97 views

How can I test my guest network?

I enabled my guest network and put my devices on it so my communications could be separate from the rest of my family on the main network. How can I test this to ensure the guest network really is ...
4
votes
1answer
92 views

Wi-Fi asks to accept (self-signed) certificate – What is it used for?

When I tried to connect to my University's Wi-Fi for the first time, it asked me to accept a (probably self-signed) certificate. Luckily they published the fingerprint so I was sure it is safe to ...
1
vote
0answers
27 views

Connect to Hidden network using wpa_supplicant [closed]

I have router [ssid: wifi_team, pwd: delhi123 and security type: wpa2] as hidden access point and other end wpa_supplicant is running from comand line. I am trying to connect to my router, while ...
13
votes
2answers
25k views

Wireless client isolation - how does it work, and can it be bypassed?

Many SOHO routers these days support a feature called "wireless client isolation", or similar. What this is supposed to do, in principle, is to limit the connectivity between wireless clients ...
1
vote
2answers
516 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
2
votes
1answer
350 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
2
votes
1answer
165 views

Sent images on company WiFi network by accident [duplicate]

I know this was stupid, so I don't need to be told that...here goes: I was at work and thought I was on 4G network on my Android phone but after sending a number of nude pics via a social media app ...
0
votes
1answer
745 views

My WiFi (with my own password) is connected to our office network. Is it secure?

Is there a possibility that they can see my browsing history, media transfers, Skype sessions and even FaceTime?
6
votes
1answer
11k views

Bypassing a captive portal with tor

I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules. What I have found recently is that simply by using Tor, I can also bypass a ...
1
vote
0answers
387 views

cgi-bin/webproc : Is my wifi router hacked [closed]

When I try to access the yahoo.com I am asked user name and password then I am routed to yahoo.com/cgi-bin/webproc Not only yahoo likewise for so many sites I am getting the same problem. ...
2
votes
2answers
167 views

How much information can be gathered about a network without connecting?

I'm working on a project that ideally needs to be able to identify local wifi networks, and be able to recall them if they are approached again. Is there any unique identifying information that can be ...
23
votes
7answers
9k views

Can my employer see that I am using Netflix on my phone using their wifi?

I work at an office typing numbers into a computer. It could get quite boring sometimes so I go on Netflix while using their wifi on my phone. Can they see what apps I'm using?
4
votes
1answer
6k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
8
votes
1answer
871 views

How does WPA2-Enterprise protect against an evil twin attack?

Original question title: What information do EAP-TLS certificates contain I recently read a couple of topics on stackoverflow, concerning the verification of Wi-Fi access points: How Are Wi-Fi ...
0
votes
2answers
17k views

Can wifi administrator see data transfer over android phone. precisely gmail app communication

sometimes I connect to wifi outside my home in office , restaurants and friends house. I want to know if wifi administrator can see the exact data my android phone communicates? I am only concerned ...
1
vote
1answer
123 views

What are WiFi certificates used for? What are they?

Recently my university updated the certificates for authenticating on their WiFi network. I was hesitant to accept it because I wasn't sure what accepting it entailed or even what it was and what ...
1
vote
2answers
594 views

What would be the most efficient way of brute forcing a wifi key [duplicate]

I was wondering how can a brut force of my wifi be prevented so I want to know the best technique that can be used to brute force it first, so protection isn't my question. My question is: What brute ...
3
votes
1answer
87 views

Does WPS actually send passphrase?

As you know, by hacking WPS we can get the networks PSK but my question is that does WPS exactly transfers PSK when connection established? If so, Why does it need to send PSK? I mean, if the session ...
5
votes
1answer
2k views

How are shopkeepers getting the MAC address of wifi enabled smartphones?

It is clear that some big malls are tracking all the wifi-enabled mobile phones before they are connected to the network... How can this be done? I have a similar issue... how to get the MAC address ...
17
votes
7answers
2k views

Stopping ill-mannered use of guest wifi [closed]

I support a small business' tech issues including setting up a guest WiFi network. The WiFi is important since they want people sitting around and consuming their product. Over the past months ...
5
votes
2answers
2k views

Wifi pineapple “Karma”

If a WiFi pineapple does a karma attack and a client connects to it, would you get the password (for the original WiFi) or would the client just connect to you? Is there anyway to stop it?
2
votes
1answer
906 views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
25
votes
15answers
10k views

How to block or detect user setting up their own personal wifi AP in our LAN?

Recently, I found a user plug a USB Wifi stick on his desktop, and set up an AP without password. How can we detect or block this via firewall rules or other approach?
3
votes
2answers
3k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
-4
votes
2answers
88 views

What's the best way for remote desktop control (100m away)? [closed]

I have two desktop computers with one located far away from the other. I want to use remote desktop control on pc1 to watch videos from pc2. Currently I use teamviewer via LAN(wifi), but it is ...
0
votes
1answer
171 views

Was I hacked remotely, how could I find out? Windows 7

I was cleaning out my old windows 7 HP desktop computer approximately 5 months ago. There was only the expired Norton 360 as far as antivirus and no firewall. Up until this point I disabled the wifi ...
4
votes
5answers
6k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...