Security for 802.11 wireless networks.
17
votes
2answers
1k views
Strength of WEP, WPA and WPA 2 PSK
I know there are three method for wifi security. What are the relative strengths of the password encryption in WEP, WPA and WPA2 PSK?
6
votes
2answers
286 views
What risks does WPA carry?
A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
3
votes
3answers
286 views
What are the security implications of phone based keyless entry systems?
I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
2
votes
2answers
268 views
Wi-fi security using WPA or WEP
In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
4
votes
3answers
183 views
Security in wireless ad hoc sensor network (without physical access)
I want to know without taking physical access, what are the methods that can steal the data in a node.
When talking about eavesdropping, how can an attacker sniff the packets? Do they need to listen ...
1
vote
2answers
211 views
What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?
I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple".
What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
0
votes
2answers
274 views
Is a VPN the only way to protect against rogue Wifi access points MITM attacks?
Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions?
This question relates to ...
4
votes
2answers
735 views
How is user authentication sent in a public wifi? Radius/802.1x/EAP etc
I visit the airport, I pull out my laptop and connect to a network (no password needed).
I open up my browser and i am presented with a screen saying I need to pay to use the network. If I pay, I ...
5
votes
1answer
485 views
Linux wireless hacking book
I am looking for recommendations on a good wireless hacking book. I would like something more focused towards the defensive, but a healthy knowledge of both would be great. I would also need it to go ...
1
vote
3answers
609 views
What devices support the permanent addition of an ARP table entry? What tools are available to manage this?
I would like to improve wireless security and certain other on-net security scenarios with a permanent ARP table entry. The idea being that someone on the same subnet or WiFi network will have a more ...
9
votes
2answers
325 views
Security of unencrypted wireless networks with authentication page
Some wireless networks, such as those offered by hotels and hotspots, are not encrypted (they don't require a pass phrase to connect) but have an authentication web page. For example, you connect to ...
3
votes
1answer
789 views
ARP-poisoning on wireless network - no packets
I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command:
ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
3
votes
2answers
297 views
What additional difficulties are present in performing ARP poisoning on a secure wireless network (WEP, WPA) vs. an insecure one?
I just finished a project in which I coded a man in the middle attack on an unsecure network. I've tried to see how feasible it would be to extend this a secured network. Some internet searching has ...
3
votes
1answer
922 views
Wireless MAC Address Filtering - Authentication/Association
Can somebody explain to me how a wireless AP denies access to the network if the client does not have the correct MAC Address.
Does it not send a probe response when a client has not got a correct ...
4
votes
4answers
451 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
2
votes
1answer
311 views
Comprehensive book to study about wireless technology
I am searching for a comprehensive book on wireless technology that covers in detail almost everything about wireless technology, including the related protocols, security, hacks, etc. I know it is ...
7
votes
3answers
5k views
How to best set up public WiFi without giving access to the rest of my network?
For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
4
votes
1answer
3k views
Bypassing a captive portal with tor
I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules.
What I have found recently is that simply by using Tor, I can also bypass a ...
1
vote
1answer
319 views
Designing and managing a captive portal
I'd like to learn more about how a captive portal works, especially the management system regarding usage, security monitoring, billing, security architecture etc.
Does anybody know any good ...
1
vote
2answers
147 views
hardware required for wifi security system
i am planning to implement one WIFI security system , in which one can lock or unlock door remotely.
As i have serched over internet and i came across
lockitron and schlage
Now what i want to know ...
5
votes
4answers
1k views
Two SSIDs on same Access point- not good?
If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...
3
votes
1answer
311 views
captive portal wikipedia article
Something on the wikipedia page regarding captive portals have confused me:
http://en.wikipedia.org/wiki/Captive_portal
When a client requests a website, DNS is queried by the browser. The
...
0
votes
1answer
2k views
Wireless Adapters for Testing with BackTrack
I would like to begin testing and working with BackTrack. I have heard that the Alfa AWUS036H wireless adapter works well with BackTrack and allows for packet injection. This adapter, however, is ...
-1
votes
1answer
1k views
How to know all the Connected devices to my Access Point including Phones [closed]
I need to list all the connected devices in my AP wireless network including mobile phones, also if it possible to know more information about each device, I am using Windows 7 and my access point is ...
4
votes
3answers
323 views
Access point fingerprinting
Does someone know of a project or a way to "fingerprint" an access point (a router)? Fingerprinting should be done irrespective of broadcastet BSSID and ESSID. BSSID and ESSIS may be included in the ...
6
votes
2answers
2k views
How does deauthing work in aireplay-ng?
I have a question of how aireplay-ng works when it deauths. I mean, it is really easy to disconnect another client from an AP: you just need to run the deauth command (in aireplay-ng) once, specifying ...
3
votes
3answers
356 views
Wireless security attack techniques
Before I ask for some advice, please don't assume I'm a script kiddie or such. This is for one of my wireless security class (CSS 1015).
It's a Saturday class and only 6 students are in the class ...
2
votes
2answers
273 views
I fortuitously accessed the configuration of unknown router: how come and what now?
I've encountered a strange thing. I connected to an open Wi-Fi, then I was just fooling around. First, I visited 192.168.0.1 and it was a router configuration page but default password didn't work.
...
1
vote
2answers
201 views
Wireless LAN router fingerprinting
Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting.
I know I can find ...
6
votes
2answers
422 views
Would an unnecessarily long password degrade performance of a WPA2 wireless network?
My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ ...
5
votes
1answer
235 views
What is this hotspot doing to my traffic?
I'm currently staying at a Four Seasons resort using their Wifi. I noticed that while surfing all non-https sites, my webpage seems to be forced into a frame. For example, here is what google's ...
8
votes
2answers
2k views
Can someone get my WPA2 password with honeypots?
Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
0
votes
0answers
354 views
How can connect two wireless modems and access point without using wire? [closed]
I have WiMax modem with wireless and have a linksys Access point WAP54G. How can I connect the router on WiMax Modem with Wifi. I dont want use any wire and disable first modem wireless to connect I ...
1
vote
2answers
126 views
I want to remove my WAP access list
Background:
Fabrication of data is a high security concern
Interception of (most) data is a low security concern
Destruction of data is a medium security concern (everything is backed up, but ...
5
votes
3answers
661 views
What are potential security risks when using an insecure wireless connection?
If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
1
vote
3answers
611 views
How wep wireless security works?
I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless securiy. From this wikipedia article I have got a basic Idea. But I still don't get what the initialize vector is? Is ...
0
votes
2answers
4k views
Four-way Handshake in WPA-Personal (WPA-PSK)
Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
2
votes
2answers
2k views
Do VPNs provide sufficient protection over public wireless networks?
I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
1
vote
1answer
192 views
wireless: Jamming or interference? [closed]
I'm currently in a hotel trying to access the internet through the wireless offered by the hotel. WPA2-Personal network, password consisting of 16 numbers. Connecting to the wireless works fine, ...
1
vote
2answers
214 views
Attaching hotspot to existing network - can it be secured?
I used to work for a company that did wireless hotspots, and this is the challenge that was given to me one day. I don't believe there is a secure solution to it, but it still bugs me for some ...
1
vote
0answers
73 views
Turn Binary Data into Airborne Packets? [closed]
Are there any software libraries and/or wireless drivers that make it possible to turn a sequence of binary data into a wireless packet in the air? For example, if someone used Airpcap/Wireshark to ...
6
votes
2answers
2k views
Preventing deauthentication attacks
I am helpless against some kiddy with backtrack who repeatedly uses aireplay-ng to deauthenticate legitimate users on my Wifi work network.
I captured and analyzed the network traffic on my Wifi work ...
5
votes
4answers
680 views
MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?
While stress testing my router using MDK3, I got the message "REALLY BIG WARNING!!! Seems like a client connected to your target AP leaks PLAINTEXT data while authenticating!!"
I viewed the tool ...
3
votes
3answers
312 views
Effective wireless scanning to meet PCI DSS 11.1?
PCI-DSS section 11.2 requires the business to "Test for the presence of wireless
access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
1
vote
2answers
345 views
Low level attacks on WLAN/LAN connection while connected to VPN
Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)?
I know, that there have been questions like this - but
I'm not asking ...
1
vote
2answers
445 views
Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]
Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet?
I have two computers and one has ...
2
votes
1answer
280 views
Airbase-ng & Metasploit the perfect pair
So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort.
Is there anyway ...
7
votes
1answer
1k views
Bypassing hidden SSID and MAC filtering “protection”
I was browsing over this question and had some follow up questions from a practical perspective.
What tools will show the SSID of an AP with the SSID set to hidden or broadcasting disabled? I have ...
15
votes
5answers
2k views
Security impact of using a public password for free WiFi
We have a WiFi network that we want to be public and free.
Does having a password that is known to everyone provide any additional security advantage to the people using this network as opposed to ...
8
votes
5answers
1k views
Access to a router's GUI
During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router.
I realise that someone could log on and be annoying to ...
