Security for 802.11 wireless networks.

learn more… | top users | synonyms

0
votes
1answer
96 views

How to enable WiFi while using two wireless cards one in monitor mode and other in managed mode?

I have two wireless adapters, one is internal PCI wireless adapter (wlan0) while other is USB wireless adapter (wlan1). I put wlan0 in monitor mode and wlan1 is in managed mode. But, after running ...
0
votes
6answers
152 views

Does MAC address filtering provide security? [duplicate]

Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it ...
0
votes
1answer
40 views

Not receiving beacons for airodump-ng to work

I have an AP close enough to me with high signal strength but for some reason I'm not receiving beacons from it. Since I don't have beacons coming in, I cannot perform deauth as well. One thing I'm ...
1
vote
4answers
104 views

How can I mitigate the risk of my wifi key being shared with strangers through apps?

Sometimes a guest asks for my wifi password, and I gladly give it to them. Sometimes that guest has a wifi sharing app, and said app shares the key with totally random strangers (I know there is some ...
3
votes
1answer
722 views

Is my network affected by malware?

I am using Wi-Fi at my home, so I can connect more devices like my phone and computer in the same network. For the past two months, whatever website I visit, it loads for a long time and at the end it ...
1
vote
2answers
58 views

Does public wifi pose a security risk to existing logins?

I'm taking a trip soon and want to figure out how safe it is to use public wifi for services. A common piece of security advice I've found about public wifi (example) is don't log into things, because ...
2
votes
0answers
104 views

Sniff wireless (Wi-Fi) trafic with Wireshark

I have a wireless card (AWUS036H) in monitor mode (with airmon-ng start wlan0) on my Debian machine. In Wireshark, in "capture options", all my interfaces are in promiscuous mode. The test network is ...
5
votes
2answers
156 views

Does TLS authentication encrypt username as well as password?

I connect to my VPN provider using openVPN. The server uses a combination of username / password and TLS authentication. If I am on a public wifi and connecting to my VPN, is my username encrypted? ...
1
vote
0answers
74 views

How to get 802.1X credentials with hostapd-wpe?

I've been using hostapd-wpe to create fake access points and trick clients into connecting to them. This plan always worked very well for "normal" WPA2-Enterprise networks, as I've always been able to ...
3
votes
1answer
200 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
4
votes
1answer
167 views

What about Long Router Passwords and WPS Push-Buttons

I have a question related to the WPS push-button capability on my router. I know that there is some material on the web about this question, but I haven't found anything that's current enough for my ...
1
vote
1answer
410 views

Dumpper and Jumpstart for hacking WPS

As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them. But with another tool called Jumpstart, together they can crack any AP that is running ...
7
votes
1answer
118 views

Triangulate a mac adress

Last Sunday my iMac was stolen by a burglar. On Monday it showed up on 'find my mac'. Good police work and a lot of luck ended up in me retrieving my device that was on a location more than 50 meter ...
1
vote
1answer
29 views

Network authentication using router firmware scripting [closed]

To connect to internet in our institute, you need to login with your credentials on a page and then approve the IP address for proxy less usage. On a router, if one device authenticates, all the other ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
-1
votes
1answer
55 views

Internet security. Wifi vs Ethernet

Home office: The security risks of using wifi for an at home business vs using Ethernet connection? Office: Would the security concerns be different or more concerning at an actual office of store? ...
1
vote
0answers
30 views

MAC spoofing under a OPN Access point HTTP does not work

I want to do a demo on the wifi security. So, I have one Wifi router and two client. I configured my router without security (OPN) and with a MAC filter. One of the two client is connected to the ...
0
votes
1answer
95 views

How can an attacker eavesdrop on users in public WIFI?

I want know why it's said that public WIFI is not safe for banking transactions or entering password for online accounts etc. I want to imitate an attacker and try to harvest as much information as I ...
0
votes
0answers
30 views

using home wifi for telegram messaging app [duplicate]

If I use telegram messaging app on my phone using my home wifi, can other members of my family see my texts or my files on their devices?
1
vote
2answers
53 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
20
votes
4answers
3k views

Is HTTPS secure over public Wi-Fi with an expired certificate?

I am staying at a hotel with free public Wi-Fi. To get Internet access I had to visit a web page and agree to the terms and conditions. This website has a security certificate, but it expired over a ...
2
votes
0answers
33 views

PMK/s and Keys/s: Which is faster?

I'm practicing on Kali Linux and was struck with the fact that almost all tutorials on the internet specified speed of aircrack-ng in Keys per second and the speed of pyrite as PMKs per second. So, ...
-2
votes
2answers
144 views

Connect to a Wi-Fi modem without password [closed]

I want to know if I can put my laptop MAC address to my Wi-Fi router and when my Wi-Fi password changed, connect to my router without entering new password? I use TP-link router.
0
votes
2answers
88 views

Sniff Wi-Fi network traffic

With Airodump I can see Wi-Fi networks and clients associated to them. I know password to this Wi-Fi networks. Is it possible to dump encrypted traffic between AP and client (WPA2) and then decrypt it ...
0
votes
0answers
56 views

Domain redirection when using Evil Twin method?

When clients are connected to my fake access point, is there a way to redirect their requests to a different domain (eg.: google.com --> hotmail.com)? Could this be achieved maybe via iptables or the ...
0
votes
1answer
191 views

Android devices are unable to connect to Rogue Acces point created using Airbase-ng

I have created a rogue access point using airbase-ng, but I can't connect to it using my android phones (note II, S4), when I tap on the access point all I get is: Obtaining IP address...', than ...
1
vote
2answers
147 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
2
votes
4answers
157 views

it is possible to make some wifi router out of service without have the connection password?

Lets say i want to make some WiFi router out of service. I can connect to the router and close the WiFi connection or change the password. But in this case i need to have full access to the router. ...
0
votes
2answers
109 views

Can Chrome browser history be seen on work wifi, even if not re-loaded?

I use the work wifi daily but am always conscious of using work related sites. However Android tends to keep most apps running in the browser so my windows(tabs) are never essentially closed down. ...
2
votes
2answers
65 views

Are there any benefits to using a semi-trusted network if a VPN is being used?

Let's say that I'm at Larry's Coffee Shop and they advertise that they have open WiFi. I open my laptop and find 2 open networks available, both called "Larry's Coffee". One of these is the authentic ...
0
votes
1answer
94 views

how to catch a packets from wifi that I am connected to ( or not connected to )? [closed]

I have wifi connection, and I want to use something like wireshark to catch all the packages that my wifi router is listening to. How can I do it? If i want to catch packets from the router that I ...
0
votes
1answer
34 views

Is there a way when using WIFI to know the specific users computer ids?

When you use WIFI is there a way to know the other users computer ids and MAC addresses? What other WIFI users can know about you when you share same WIFI?
3
votes
0answers
66 views

Broadcasting 10k SSIDs

How hard would it be, and or is it possible, to configure a router or PC to broadcast ten thousand SSIDs. If it is possible what repercussions would it have? Would this be a form of DOSing or is there ...
0
votes
4answers
457 views

How can I remove an unknown device from my wifi network?

I have an OnHub (from Google), and there is a device I don't know on my wifi network. Is there some way for me to kick it, or DDoS it, whether through some command line command on windows or ubuntu, ...
1
vote
1answer
62 views

Can username/passwords be intercepted on an App using public wifi?

I use the ADVFN finance app for stock prices every morning on the public wifi on my train to work. This requires me to login with my username and password on the app(which are saved). Do apps provide ...
0
votes
1answer
75 views

How to speed-up data collecting of WEP AP for aircrack?

I'm using aireplay to collect some data from AP alongside with aircrack. Unfortunetlly, the proccess seems quite slow to me as I've reached 2000 in more than 20mins so far. What most affects the speed ...
11
votes
3answers
1k views

Why is my phone connection secure without a password when WiFi is not even with a password?

When I talk on the phone or send text messages, I never need to type a userid and password. But when I use WiFi I need to use a password. How is the phone connection secured without a password, and ...
5
votes
3answers
125 views

How will popular WiFi clients react to an evil twin

If I create an evil twin hotspot next to a legitimate AP and simply clone the SSID, I know that my WiFi client will see these as 2 different APs and both will show up in a list of available networks (...
1
vote
1answer
59 views

How safe is it to use a Linksys WAP54G Access Point?

I have a Linksys WAP54G v1 device that I want to use to create a second WiFi network. The device is configured for WPA2-Personal, AES encryption with a random 64 character paraphrase. The firmware ...
1
vote
1answer
151 views

How to optimize cracking speed with Reaver

When testing network security with Reaver in order to find out WPS, what parameters do you usually use with respect to cracking speed? I've chosen for TP-LINK Archer C20i AC750 Dual Band a delay of ...
1
vote
1answer
95 views

Can Passpoint X.509 certificates be used to MITM SSL connections on Passpoint networks?

Passpoint/Hotspot 2.0 public networks like LinkNYC require users to install X.509 certificates, for EAP authentication. Can these certificates be used by the provider to execute man-in-the middle ...
43
votes
9answers
8k views

Can an open Wi-Fi hotspot be considered “secure” when using a VPN connection?

There are many open Wi-Fi hotspots scattered around from cafes to airports. I understand that a non-passworded Wi-Fi leaves traffic unencrypted and therefore available for hackers to read. I also ...
2
votes
1answer
65 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
2
votes
1answer
50 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a button,...
-2
votes
1answer
81 views

Sniffing or DOS attacks or MIM Attack [closed]

i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
0
votes
0answers
131 views

Changing the SSID of the fake AP created by linset

As per the title I described above, I know that linset basically created a fake AP for the victim to connect then steal their Wi-Fi password or any other credentials. What I want to know is how do we ...
2
votes
1answer
90 views

Does HSTS make using a public WiFi safe?

What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...
0
votes
1answer
106 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
1
vote
1answer
65 views

How do I associate an SSID to a device?

In other words I am referring to the wlan.fc.type_subtype==0x04 filter in Wireshark while using a WiFi adapter in monitor mode. How can I associate an SSID to an Android device (for example) if that ...
-2
votes
1answer
36 views

Router connected to my ethernet [duplicate]

I'm guessing that someone is bringing his router to provide wifi to his coworkers, by connecting it to a certain point on one of the 8 floors of my building, how can I know where is connected?