Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
3answers
6k views

How does WEP wireless security work?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless securiy. From this Wikipedia article I have got a basic Idea. But what is the initialize vector? Is some kind of ...
72
votes
16answers
13k views

Trying to keep high school students out of the Wi-Fi network

I'm a teacher and IT person at a small K-12 school. The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
0
votes
1answer
175 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then I started airodump-ng using this ...
20
votes
7answers
4k views

Safe to make a VPN connection over coffee shop WIFI?

On my work laptop I regularly create a VPN connection that I use to remote desktop to our web server. Is this safe to do on a coffee shop where random people are connected to the same wifi network?
3
votes
1answer
506 views

How can I find out if someone has been on my home wifi network?

I am aware of DCHP tables, and apps that can scan your network to see who is "currently" on your wifi network, but I am more interested in how to tell if someone has been on my wifi network at some ...
11
votes
2answers
17k views

Do VPNs provide sufficient protection over public wireless networks?

I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
-2
votes
2answers
71 views

What is the weakness of aircracking wifi attacks?

I did not come to anything after searching Google for some time. What's preventing someone from just doing an aircrack wifi atack and do any kind of attack once logged on the victims network?
3
votes
0answers
268 views

Bypassing Hotel Wifi authentication using VPN [closed]

I'm currently in a hotel with pay per day WiFi, I have have logged into it a couple of times on my phone. I just turned on my VPN before logging in to the WiFi and it seems to have bypassed the hotel ...
1
vote
1answer
47 views

Padding of 802.11 packet with 0's in libpcap [closed]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
3
votes
2answers
548 views

How to know if I'm under a MITM attack

If I am connected in a public WiFi, is there any way to know whether I am under attack or not while browsing sites using SSL? For example, if I visit facebook.com and the URL starts with "https://", ...
1
vote
1answer
108 views

Can Hydra and Crunch be used in combination for HTTP-get-form? [closed]

I'm trying to recover my router username and password without resetting the router for educational purposes. I read that Hydra can be used for "brute-forcing" http-get-form authentication that most ...
1
vote
0answers
88 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
2
votes
0answers
46 views

If I install a certificate for the purposes of logging into a Wifi connection, is it still safe?

There are some wifi networks (large universities for example) which use HTTPS to get to a login page, and in order to verify that they have not been spoofed, provide the certificate ahead of time ...
1
vote
0answers
127 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
2
votes
5answers
14k views

WiFi deauth attack - Difference between Aireplay and MDK3

I am currently working on some WiFi related security issues, and something appeared to me. I have an Open WiFi network, to which a client connects. I try the Deauth attack from Aireplay ...
4
votes
3answers
6k views

WiFi connection history [closed]

I have a hunch someone is logging on my wifi. I already know how to see who is currently using my wifi, but can I find out who was using my wifi in the past?
1
vote
1answer
123 views

Can my identity be revealed through WiFi access?

Assuming I am using a WiFi connection on my Android phone, can somebody also on the network know the particular sites I visit? I believe they will get to know my MAC ID, but will they get to know ...
22
votes
2answers
9k views

How is wireless WiFi password cracked?

Let's say I have a wireless network that is password protected. What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
0
votes
2answers
223 views

Do WiFi passwords remain accessible significantly after logging in?

"... they'll go to the taskbar and look at the properties of the WiFi router to get the password." is a quote from another question on this site, and is in the context of WiFi passwords. The ...
-1
votes
3answers
62 views

Does using reaver crash or bring down a network

Does using Reaver crash or bring down a network? I've googled this and haven't turned up anything. I mean like a home router.
2
votes
5answers
102 views

Reasons for gathering MAC address list

Suppose there is a password-secured WiFi network that exists to provide users with Internet access only. Edit: Consider a guest/mobile-BYOD network as an example. Since filtering access to a WiFi ...
3
votes
6answers
3k views

If I am not logged into my company's WIFI, can they view my information? Or am I transmitting?

I was at work using my phone. We have an open WIFI, but I did not use it to go online. I was wondering, can my information be viewed or was I transmitting data even though my phone said I was not ...
1
vote
2answers
160 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
4
votes
2answers
91 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
-1
votes
1answer
287 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
1
vote
3answers
90 views

Risks associated with HTTP content injection?

I'm curious about the risks associated with HTTP content injection, where an ISP injects content to pages accessed over non HTTPS connections. Some examples: ...
-1
votes
4answers
578 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
7
votes
4answers
1k views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
2
votes
2answers
174 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
6
votes
7answers
15k views

Is a longer WiFi password more secure?

Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
0
votes
0answers
57 views

Wifi Pineapple :Modifying white list by client

If wifi pineapple maintains a whitelist with specific ssid's, then it responds to only those ssid probes.Is there any method or tools by which I can access/modify/interact with wifi pineapple's white ...
14
votes
8answers
10k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like whatsapp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
39
votes
7answers
8k views

Why isn't open WiFi encrypted?

As far as I understand, WiFi networks that require no password send traffic through the air unencrypted. Those that require a password encrypt each connection uniquely, even if they're all using the ...
5
votes
1answer
2k views

ARP-poisoning on wireless network - no packets

I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command: ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
4
votes
2answers
1k views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
47
votes
9answers
22k views

Is visiting HTTPS websites on a public hotspot secure?

It's often said that HTTPS SSL/TLS connections are encrypted and said to be secure because the communication between the server and me is encrypted (also provides server authentication) so if someone ...
2
votes
1answer
178 views

How are Captive Wifi Portals secured?

I'm looking for a captive portal solution that prevents other users from stealing the session key from other active users. (or prevents the cloning the authenticated user's MAC) Is there a reliable ...
0
votes
2answers
127 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
9
votes
5answers
825 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
1
vote
3answers
103 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
1
vote
1answer
712 views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
3
votes
1answer
93 views

Why do inflight wifi networks display a captcha?

When you log on to Gogo Inflight Wifi or similar, Gogo displays a captcha: A CAPTCHA is usually associated with preventing automated traffic from accessing your network; however, to connect to Gogo ...
10
votes
7answers
31k views

Recommend Length for Wi-FI PSK?

I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
7
votes
3answers
2k views

Encrypt WiFi connection per connected user

One of the questions that comes on quite often is about WiFi encryption. Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
0
votes
3answers
138 views

Is my LAN infected?

I don't know if this is the right place for this question but here it goes... When I access websites that have Google ads included with a device (pc, tablet, laptop) connected to my LAN, these ads ...
0
votes
3answers
1k views

Is it possible to use one-time passwords for WI-FI?

Is it possible to configure an access point to use one-time passwords for authentication and encryption ?
64
votes
7answers
21k views

Is it possible the person sitting across from me at Starbucks was trying to hack my laptop?

I was using my laptop at a Starbucks on a table, and a person was using a laptop on the same table across from me, a couple seats to my side. He flicked some plastic thing across the table towards my ...
18
votes
3answers
1k views

Are open wireless networks unencrypted?

When you connect to an open wireless network (that is, a wireless network without any symmetric password set) is there any sort of secure key exchange going on, or is data sent back and forth ...
2
votes
2answers
7k views

What details does my iPhone reveal about the user (if any) when I connect to a wifi network?

I accidentally used my work's wifi to look at porn using my iPhone. I refreshed a tab I had open from a session when I wasn't at work. Now I'm worried my firm will find out. The network is ...