Security for 802.11 wireless networks.

learn more… | top users | synonyms

11
votes
3answers
5k views

What is the purpose of changing the default SSID?

Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
3
votes
1answer
67 views

Why use WPS on an unsecured WiFi AP?

I was searching for my home WiFi AP (router's broken and am trying to fix it), when I found a WiFi access point that does not have any security but does have WPS enabled: Thinking that it probably ...
5
votes
3answers
121 views

Ways to protect phone from hacking through a wifi network when travelling

I'm planning on traveling to a resort in Mexico. The resort offers wifi, but I know someone who recently traveled to this resort and had their phone hacked via the wifi network. I would be wanting to ...
0
votes
2answers
111 views

Is WPA-PSK AES safer than WPA-PSK TKIP-AES?

On this forum thread I see (translated): On Telecom Router we have those wifi encryption modes Disabled-OpenNet - WEP (128 bit) -> WEP (unsafe breakable in some minutes) - WPA-PSK TKIP 256 bit -...
3
votes
5answers
221 views

If I accept a certificate in order to use my company’s Wi-Fi, am I vulnerable to MITM attacks?

In order to get my personal phone onto the Wi-Fi network at my workplace, I have to accept a certificate: If I accept this certificate, will I be vulnerable to man-in-the-middle attacks? For ...
2
votes
3answers
130 views

What is this Polish IP doing on my internal WiFi?

Lately I've seen many strange events in the logs of my wifi router / cable modem. Many are linked to the IP address 83.0.68.240 from the ISP, Orange Polanska. Events like "DoS attack: Ping Of Death", "...
4
votes
1answer
84 views

Steps to recommend after people connect Android devices to questionable open WiFi access points

What are the appropriate steps to recommend for people to take after they connect their Android device to questionable open WiFi access points? When I say "people", I mean friends and colleagues. I ...
6
votes
2answers
170 views

Can free Wi-Fi hotspot providers snoop on HTTPS communications?

Every article (and post on this website) I find on public Wi-Fi safety is mostly concerned with other people connected to the same network snooping on our communications. As far as I understand it, we’...
40
votes
7answers
13k views

Somebody hacked my router and changed my wifi SSID

One of my neighbours hacked the password of my router and he uses my limited internet package. I change the wifi SSID almost daily, but he can hack it easily. Today, he changed the SSID to a hate ...
12
votes
3answers
2k views

Can an administrator see all of my info on shared, private WiFi?

I am currently sharing a WiFi network with my neighbor. We are on the same network. I never set up as a Guest. My questions are: whether or not this person can see the sites I visit, the info I ...
3
votes
1answer
208 views

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms. First I kill the processes that interfere with sudo airmon-...
0
votes
3answers
91 views

Is HTTPS over wifi still safe if a hacker can set up a rogue DHCP server?

I always heard that entering passwords or any sensitive information while using a public wifi spot is safe only when visiting an HTTPS website, ensuring that the URI and certificate are valid. Many ...
10
votes
7answers
21k views

Is a longer WiFi password more secure?

Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
-7
votes
1answer
125 views

I want to learn hacking but unable to connect to internet [closed]

I'm not sure if this is offtopic or not but i'll ask it anyway. Im 15 and i am into web design and development, working on PHP and MySQL. And i want to learn hacking but unfortunately my windows ...
28
votes
5answers
13k views

Are MAC Address Filtering and SSID Hiding still worthwhile?

On a recent certification exam, I was presented with a question about ways to secure an 802.11 wireless network. It was a multiple-answer question, but the only two available answers that related at ...
0
votes
6answers
148 views

Does MAC address filtering provide security? [duplicate]

Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it ...
0
votes
1answer
39 views

Not receiving beacons for airodump-ng to work

I have an AP close enough to me with high signal strength but for some reason I'm not receiving beacons from it. Since I don't have beacons coming in, I cannot perform deauth as well. One thing I'm ...
1
vote
4answers
103 views

How can I mitigate the risk of my wifi key being shared with strangers through apps?

Sometimes a guest asks for my wifi password, and I gladly give it to them. Sometimes that guest has a wifi sharing app, and said app shares the key with totally random strangers (I know there is some ...
3
votes
1answer
657 views

Is my network affected by malware?

I am using Wi-Fi at my home, so I can connect more devices like my phone and computer in the same network. For the past two months, whatever website I visit, it loads for a long time and at the end it ...
5
votes
3answers
125 views

How will popular WiFi clients react to an evil twin

If I create an evil twin hotspot next to a legitimate AP and simply clone the SSID, I know that my WiFi client will see these as 2 different APs and both will show up in a list of available networks (...
1
vote
2answers
57 views

Does public wifi pose a security risk to existing logins?

I'm taking a trip soon and want to figure out how safe it is to use public wifi for services. A common piece of security advice I've found about public wifi (example) is don't log into things, because ...
1
vote
1answer
8k views

Am I getting DDOS attacked?

There has been some weird activity with my WiFi router after somebody threatened to DDoS me. I am looking at my WiFi router's activity logs and I don't know what I am looking for. What happens is my ...
3
votes
1answer
559 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
1
vote
1answer
199 views

Network Security with EAP: PEAP and Phase 2: MSCHAPv2?

I want to connect to my college WiFi but I’m worried about the security (data leakage, hacks, MITM). The configuration I used to connect to my college WiFi is as follows, EAP: PEAP Phase 2: MSCHAPv2 ...
5
votes
2answers
154 views

Does TLS authentication encrypt username as well as password?

I connect to my VPN provider using openVPN. The server uses a combination of username / password and TLS authentication. If I am on a public wifi and connecting to my VPN, is my username encrypted? ...
2
votes
0answers
103 views

Sniff wireless (Wi-Fi) trafic with Wireshark

I have a wireless card (AWUS036H) in monitor mode (with airmon-ng start wlan0) on my Debian machine. In Wireshark, in "capture options", all my interfaces are in promiscuous mode. The test network is ...
0
votes
2answers
108 views

Can Chrome browser history be seen on work wifi, even if not re-loaded?

I use the work wifi daily but am always conscious of using work related sites. However Android tends to keep most apps running in the browser so my windows(tabs) are never essentially closed down. ...
1
vote
0answers
72 views

How to get 802.1X credentials with hostapd-wpe?

I've been using hostapd-wpe to create fake access points and trick clients into connecting to them. This plan always worked very well for "normal" WPA2-Enterprise networks, as I've always been able to ...
1
vote
2answers
146 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
3
votes
1answer
191 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
1
vote
1answer
402 views

Dumpper and Jumpstart for hacking WPS

As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them. But with another tool called Jumpstart, together they can crack any AP that is running ...
37
votes
6answers
178k views

If someone hacks my wi-fi password, what can they see and how?

If someone knows my wifi password (be it WEP or WPA) what can they see? Do they just see URLs I visit, or can they see everything in my browser, or even everything I do on my computer? Does using ...
7
votes
1answer
118 views

Triangulate a mac adress

Last Sunday my iMac was stolen by a burglar. On Monday it showed up on 'find my mac'. Good police work and a lot of luck ended up in me retrieving my device that was on a location more than 50 meter ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
1
vote
2answers
278 views

Do WiFi passwords remain accessible significantly after logging in?

"... they'll go to the taskbar and look at the properties of the WiFi router to get the password." is a quote from another question on this site, and is in the context of WiFi passwords. The ...
1
vote
1answer
29 views

Network authentication using router firmware scripting [closed]

To connect to internet in our institute, you need to login with your credentials on a page and then approve the IP address for proxy less usage. On a router, if one device authenticates, all the other ...
-1
votes
1answer
55 views

Internet security. Wifi vs Ethernet

Home office: The security risks of using wifi for an at home business vs using Ethernet connection? Office: Would the security concerns be different or more concerning at an actual office of store? ...
1
vote
3answers
343 views

Security risk of connecting one mobile device to another mobile device's hotspot

Is there any risk when connecting an Android Phone to a [Verizon] iPhone's Hotspot? If there are I'd like to know about solutions. The Android Phone will basically be tapping the data plan of the ...
1
vote
3answers
8k views

Does rooting an Android Phone make it Vulnerable? [closed]

If android os in a device is rooted , will it be safe to use it in public networks where possibilities of attacks is more.
1
vote
0answers
29 views

MAC spoofing under a OPN Access point HTTP does not work

I want to do a demo on the wifi security. So, I have one Wifi router and two client. I configured my router without security (OPN) and with a MAC filter. One of the two client is connected to the ...
0
votes
1answer
93 views

How can an attacker eavesdrop on users in public WIFI?

I want know why it's said that public WIFI is not safe for banking transactions or entering password for online accounts etc. I want to imitate an attacker and try to harvest as much information as I ...
3
votes
2answers
4k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
0
votes
0answers
30 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
20
votes
4answers
3k views

Is HTTPS secure over public Wi-Fi with an expired certificate?

I am staying at a hotel with free public Wi-Fi. To get Internet access I had to visit a web page and agree to the terms and conditions. This website has a security certificate, but it expired over a ...
2
votes
0answers
32 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
5
votes
3answers
9k views

How does WEP wireless security work?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless security. From this Wikipedia article I have got a basic Idea. But what is the initialize vector? Is some kind of ...
-2
votes
2answers
141 views

Connect to a Wi-Fi modem without password [closed]

I want to know if I can put my laptop MAC address to my Wi-Fi router and when my Wi-Fi password changed, connect to my router without entering new password? I use TP-link router.
0
votes
2answers
86 views

Sniff Wi-Fi network traffic

With Airodump I can see Wi-Fi networks and clients associated to them. I know password to this Wi-Fi networks. Is it possible to dump encrypted traffic between AP and client (WPA2) and then decrypt it ...
1
vote
1answer
58 views

How safe is it to use a Linksys WAP54G Access Point?

I have a Linksys WAP54G v1 device that I want to use to create a second WiFi network. The device is configured for WPA2-Personal, AES encryption with a random 64 character paraphrase. The firmware ...
0
votes
0answers
54 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...