Security for 802.11 wireless networks.

learn more… | top users | synonyms

4
votes
1answer
77 views

Can my VPN provider see the name of my WiFi?

Can my VPN provider track the wireless network name, besides the IP? If I'm connecting from home to the VPN via my WiFi called "Whatever" - do they see that my WiFi is called that?
4
votes
1answer
178 views

Is it possible to hack WPS PIN of routers that lockout exponentially after failed tries?

I have been interested in Wireless hacking lately, and I can do dictionary attacks, and some other type of attacks. Though, I wanted to hack my ASUS RT-N12D1 router's WPS PIN. ASUS doesn't alllow to ...
40
votes
5answers
9k views

My WiFi network is replaced by another network. Am I being hacked?

To begin with, I am not very computer savvy. I am an older person with an older computer and a 2003 Windows XP using Google Chrome for a browser. (If anyone is old enough to remember when Windows ...
1
vote
1answer
75 views

Could Diffie-Hellman be used to stop people who knows the PSK from snooping on your WiFi?

One known problem with WPA2 is that anybody who knows the preshared key can snoop on the handshake and decrypt all subsequent traffic between any parties on the network. In the typical coffee shop ...
-4
votes
1answer
93 views

If I am an admin of a WiFi router can I learn the password when it gets change by other admin? [closed]

I have a Huawei WS319 router. The admin password is known to me and my friend. Is there any way to learn WiFi password (through automatic notification) if it gets changed in the future, given that I ...
4
votes
1answer
75 views

Why use WPS on an unsecured WiFi AP?

I was searching for my home WiFi AP (router's broken and am trying to fix it), when I found a WiFi access point that does not have any security but does have WPS enabled: Thinking that it probably ...
0
votes
2answers
165 views

Is WPA-PSK AES safer than WPA-PSK TKIP-AES?

On this forum thread I see (translated): On Telecom Router we have those wifi encryption modes Disabled-OpenNet - WEP (128 bit) -> WEP (unsafe breakable in some minutes) - WPA-PSK TKIP 256 bit -...
5
votes
3answers
130 views

Ways to protect phone from hacking through a wifi network when travelling

I'm planning on traveling to a resort in Mexico. The resort offers wifi, but I know someone who recently traveled to this resort and had their phone hacked via the wifi network. I would be wanting to ...
3
votes
5answers
301 views

If I accept a certificate in order to use my company’s Wi-Fi, am I vulnerable to MITM attacks?

In order to get my personal phone onto the Wi-Fi network at my workplace, I have to accept a certificate: If I accept this certificate, will I be vulnerable to man-in-the-middle attacks? For ...
2
votes
3answers
149 views

What is this Polish IP doing on my internal WiFi?

Lately I've seen many strange events in the logs of my wifi router / cable modem. Many are linked to the IP address 83.0.68.240 from the ISP, Orange Polanska. Events like "DoS attack: Ping Of Death", "...
4
votes
1answer
92 views

Steps to recommend after people connect Android devices to questionable open WiFi access points

What are the appropriate steps to recommend for people to take after they connect their Android device to questionable open WiFi access points? When I say "people", I mean friends and colleagues. I ...
6
votes
2answers
179 views

Can free Wi-Fi hotspot providers snoop on HTTPS communications?

Every article (and post on this website) I find on public Wi-Fi safety is mostly concerned with other people connected to the same network snooping on our communications. As far as I understand it, we’...
3
votes
1answer
513 views

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms. First I kill the processes that interfere with sudo airmon-...
0
votes
3answers
98 views

Is HTTPS over wifi still safe if a hacker can set up a rogue DHCP server?

I always heard that entering passwords or any sensitive information while using a public wifi spot is safe only when visiting an HTTPS website, ensuring that the URI and certificate are valid. Many ...
12
votes
3answers
2k views

Can an administrator see all of my info on shared, private WiFi?

I am currently sharing a WiFi network with my neighbor. We are on the same network. I never set up as a Guest. My questions are: whether or not this person can see the sites I visit, the info I ...
-7
votes
1answer
142 views

I want to learn hacking but unable to connect to internet [closed]

I'm not sure if this is offtopic or not but i'll ask it anyway. Im 15 and i am into web design and development, working on PHP and MySQL. And i want to learn hacking but unfortunately my windows ...
0
votes
1answer
162 views

How to enable WiFi while using two wireless cards one in monitor mode and other in managed mode?

I have two wireless adapters, one is internal PCI wireless adapter (wlan0) while other is USB wireless adapter (wlan1). I put wlan0 in monitor mode and wlan1 is in managed mode. But, after running ...
0
votes
6answers
184 views

Does MAC address filtering provide security? [duplicate]

Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it ...
0
votes
1answer
49 views

Not receiving beacons for airodump-ng to work

I have an AP close enough to me with high signal strength but for some reason I'm not receiving beacons from it. Since I don't have beacons coming in, I cannot perform deauth as well. One thing I'm ...
1
vote
4answers
148 views

How can I mitigate the risk of my wifi key being shared with strangers through apps?

Sometimes a guest asks for my wifi password, and I gladly give it to them. Sometimes that guest has a wifi sharing app, and said app shares the key with totally random strangers (I know there is some ...
3
votes
1answer
897 views

Is my network affected by malware?

I am using Wi-Fi at my home, so I can connect more devices like my phone and computer in the same network. For the past two months, whatever website I visit, it loads for a long time and at the end it ...
1
vote
2answers
60 views

Does public wifi pose a security risk to existing logins?

I'm taking a trip soon and want to figure out how safe it is to use public wifi for services. A common piece of security advice I've found about public wifi (example) is don't log into things, because ...
2
votes
0answers
107 views

Sniff wireless (Wi-Fi) trafic with Wireshark

I have a wireless card (AWUS036H) in monitor mode (with airmon-ng start wlan0) on my Debian machine. In Wireshark, in "capture options", all my interfaces are in promiscuous mode. The test network is ...
5
votes
2answers
183 views

Does TLS authentication encrypt username as well as password?

I connect to my VPN provider using openVPN. The server uses a combination of username / password and TLS authentication. If I am on a public wifi and connecting to my VPN, is my username encrypted? ...
1
vote
0answers
90 views

How to get 802.1X credentials with hostapd-wpe?

I've been using hostapd-wpe to create fake access points and trick clients into connecting to them. This plan always worked very well for "normal" WPA2-Enterprise networks, as I've always been able to ...
3
votes
1answer
269 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
5
votes
1answer
213 views

What about Long Router Passwords and WPS Push-Buttons

I have a question related to the WPS push-button capability on my router. I know that there is some material on the web about this question, but I haven't found anything that's current enough for my ...
1
vote
1answer
485 views

Dumpper and Jumpstart for hacking WPS

As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them. But with another tool called Jumpstart, together they can crack any AP that is running ...
7
votes
1answer
127 views

Triangulate a mac adress

Last Sunday my iMac was stolen by a burglar. On Monday it showed up on 'find my mac'. Good police work and a lot of luck ended up in me retrieving my device that was on a location more than 50 meter ...
1
vote
1answer
29 views

Network authentication using router firmware scripting [closed]

To connect to internet in our institute, you need to login with your credentials on a page and then approve the IP address for proxy less usage. On a router, if one device authenticates, all the other ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
-1
votes
1answer
58 views

Internet security. Wifi vs Ethernet

Home office: The security risks of using wifi for an at home business vs using Ethernet connection? Office: Would the security concerns be different or more concerning at an actual office of store? ...
1
vote
0answers
36 views

MAC spoofing under a OPN Access point HTTP does not work

I want to do a demo on the wifi security. So, I have one Wifi router and two client. I configured my router without security (OPN) and with a MAC filter. One of the two client is connected to the ...
0
votes
1answer
106 views

How can an attacker eavesdrop on users in public WIFI?

I want know why it's said that public WIFI is not safe for banking transactions or entering password for online accounts etc. I want to imitate an attacker and try to harvest as much information as I ...
0
votes
0answers
30 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
1
vote
2answers
63 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
20
votes
4answers
3k views

Is HTTPS secure over public Wi-Fi with an expired certificate?

I am staying at a hotel with free public Wi-Fi. To get Internet access I had to visit a web page and agree to the terms and conditions. This website has a security certificate, but it expired over a ...
2
votes
0answers
43 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
-2
votes
2answers
174 views

Connect to a Wi-Fi modem without password [closed]

I want to know if I can put my laptop MAC address to my Wi-Fi router and when my Wi-Fi password changed, connect to my router without entering new password? I use TP-link router.
0
votes
2answers
95 views

Sniff Wi-Fi network traffic

With Airodump I can see Wi-Fi networks and clients associated to them. I know password to this Wi-Fi networks. Is it possible to dump encrypted traffic between AP and client (WPA2) and then decrypt it ...
0
votes
0answers
62 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
1answer
248 views

Android devices are unable to connect to Rogue Acces point created using Airbase-ng

I have created a rogue access point using airbase-ng, but I can't connect to it using my android phones (note II, S4), when I tap on the access point all I get is: Obtaining IP address...', than ...
1
vote
2answers
171 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
2
votes
4answers
168 views

it is possible to make some wifi router out of service without have the connection password?

Lets say i want to make some WiFi router out of service. I can connect to the router and close the WiFi connection or change the password. But in this case i need to have full access to the router. ...
0
votes
2answers
123 views

Can Chrome browser history be seen on work wifi, even if not re-loaded?

I use the work wifi daily but am always conscious of using work related sites. However Android tends to keep most apps running in the browser so my windows(tabs) are never essentially closed down. ...
2
votes
2answers
70 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
0
votes
1answer
102 views

how to catch a packets from wifi that I am connected to ( or not connected to )? [closed]

I have wifi connection, and I want to use something like wireshark to catch all the packages that my wifi router is listening to. How can I do it? If i want to catch packets from the router that I ...
0
votes
1answer
35 views

Is there a way when using WIFI to know the specific users computer ids?

When you use WIFI is there a way to know the other users computer ids and MAC addresses? What other WIFI users can know about you when you share same WIFI?
3
votes
0answers
70 views

Broadcasting 10k SSIDs

How hard would it be, and or is it possible, to configure a router or PC to broadcast ten thousand SSIDs. If it is possible what repercussions would it have? Would this be a form of DOSing or is there ...
0
votes
4answers
650 views

How can I remove an unknown device from my wifi network?

I have an OnHub (from Google), and there is a device I don't know on my wifi network. Is there some way for me to kick it, or DDoS it, whether through some command line command on windows or ubuntu, ...