Security for 802.11 wireless networks.
6
votes
4answers
307 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
6
votes
1answer
601 views
Deploying a campus WiFi network that authenticates against an AD LDAP
We are looking to deploy about 15-20 Cisco 1131ag access points on campus. I have been reading up on different authentication methods, but I don’t know what will be the best long term solution that ...
6
votes
1answer
453 views
How to get hold of and use WPA session keys?
I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
5
votes
4answers
506 views
How can one defend against DoS attacks at the physical layer?
Of course, there's always the odd issue of old microwaves and wireless telephone handsets interfering with Wi-Fi performance. And, in many areas, there's a fair chance that you're going to have to ...
5
votes
7answers
1k views
What security risks exist in cell phone apps' data transfer?
Smartphones apps transfer various types of data over the provider's data network (or wifi, if enabled). What security risks are there in this transfer, and how can the risks be mitigated? I'm not ...
5
votes
2answers
229 views
Is it safe to log into my bank website over a public wifi?
Is it safe to log into my bank website over a public wifi (like a coffee shop)?
I apologize if this is a really dumb question. I realize that the connection between the browser and bank servers ...
5
votes
7answers
300 views
Are smartphones at least as safe as “regular” computers for personal data?
Like a lot of people, I pretty much run my life on the Web these days. I use online bill pay, I shop at Internet retailers, I keep in touch with friends electronically, &c. I'm pretty comfortable ...
5
votes
3answers
555 views
How do I protect myself against 'hole 196'?
I came across this question a while ago and read about hole 196.
Is there something I can install on my laptop to protect it against WPA2 Hole196?
Software (such as Snort or DecaffeintID) can ...
5
votes
2answers
2k views
Detecting the presence of wifi devices
Is it possible, with a normal wifi adapter, to detect present wifi devices in the surrounding? Let's say, is it possible to detect an Iphone with wifi switched on in the range of my wifi adapter?
...
5
votes
3answers
457 views
Security measures for a WiFi access point?
I am planning to purchase a program that comes with an App that allows you to control the program via phone. The developer told me that the connection will be done via an extra WIFI box connecting to ...
5
votes
2answers
639 views
How eavesdropping will be performed how can I prevent from eavesdropping
I believe that eavesdropping in a man in middle attack and the message is passing from the client to server the man sitting at ISP or network hackers can look at what message I am sending. Heard that ...
5
votes
4answers
1k views
Two SSIDs on same Access point- not good?
If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...
5
votes
2answers
3k views
Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
5
votes
4answers
679 views
MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?
While stress testing my router using MDK3, I got the message "REALLY BIG WARNING!!! Seems like a client connected to your target AP leaks PLAINTEXT data while authenticating!!"
I viewed the tool ...
5
votes
3answers
386 views
What does WEP access point show during aircrack-ng attack?
I bought an old, used WRT-54G () which strangely enough, was running DD-WRT v24-sp2. Weird what turns up at yard sales.
I want to try the "aircrack-ng" WEP cracking procedure on it. The criteria ...
5
votes
3answers
661 views
What are potential security risks when using an insecure wireless connection?
If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
5
votes
1answer
485 views
Linux wireless hacking book
I am looking for recommendations on a good wireless hacking book. I would like something more focused towards the defensive, but a healthy knowledge of both would be great. I would also need it to go ...
5
votes
1answer
235 views
What is this hotspot doing to my traffic?
I'm currently staying at a Four Seasons resort using their Wifi. I noticed that while surfing all non-https sites, my webpage seems to be forced into a frame. For example, here is what google's ...
5
votes
1answer
2k views
Obtain credentials by spoofing WPA/WPA2 Enterprise network?
I have a large scale wireless network secured using WPA/WPA2 Enterprise authentication. Recently, I was made aware of the possibility that someone may use a dd-wrt router and a computer to spoof the ...
5
votes
1answer
274 views
How to detect infected machines on my wifi?
I currently live in a building with around 40-50 other tenants (mostly students) and we all share one connection to the Internet using one of 3 wifi routers that are spread throughout the building. ...
4
votes
2answers
1k views
Wireless hardware with limited range?
I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity?
Several sources have recommended WPA2, but I'd still ...
4
votes
4answers
451 views
How to keep secure while browsing on open wifi when SSL VPN is blocked?
After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
4
votes
6answers
5k views
If someone hacks my wi-fi connnection, what can they see and how?
I have two questions on wifi security:
If someone knows my wifi password (be it WEP or WPA) what can they
see on my screen? Do they just see URLs I visit, or can they see
everything in my ...
4
votes
5answers
3k views
Is a longer WiFi password more secure?
Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
4
votes
4answers
3k views
Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?
The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
4
votes
4answers
381 views
What particular concerns should one bear in mind when wardriving?
I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks.
Right now, I'm still in the planning stages of this ...
4
votes
6answers
4k views
Recommend Length for Wi-FI PSK?
I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
4
votes
3answers
323 views
Access point fingerprinting
Does someone know of a project or a way to "fingerprint" an access point (a router)? Fingerprinting should be done irrespective of broadcastet BSSID and ESSID. BSSID and ESSIS may be included in the ...
4
votes
3answers
4k views
Is it possible to create a custom login page for your own Wi-Fi hotspot?
How do I create my own open Wi-Fi hotspot/access point with a custom login page similar to those found in commercial hot-spots?
The page would be accessible using Windows or iOS, and users would have ...
4
votes
2answers
735 views
How is user authentication sent in a public wifi? Radius/802.1x/EAP etc
I visit the airport, I pull out my laptop and connect to a network (no password needed).
I open up my browser and i am presented with a screen saying I need to pay to use the network. If I pay, I ...
4
votes
3answers
1k views
How can I check wifi activity?
I have a LAN network with three computers connecting to the Internet both through wired and encrypted wifi connections. Is there a way I can check who is connecting to the Internet via the wifi ...
4
votes
1answer
70 views
Tracing Wireless Card
Let's say that hypothetically someone had broken into a WiFi connection. We can't find any evidence of whom it is via sniffing the traffic or anything of the sort.
Is there any way to triangulate ...
4
votes
3answers
116 views
Getting automatically logged in to others session via WIFI
Recently i got a very strange behavior on our WIFI network: We share a WIFI network with a simple router. One of us pays the bills and he's the one, who got the management account from our ISP. So if ...
4
votes
2answers
590 views
The Dangers of Open Wi-Fi
I know that the first response to a question titled like so is "seriously?". I know the answers exists, but I am just trying to put everything together.
Using and/or having an open Wi-Fi network is ...
4
votes
1answer
549 views
Is a public known password protected Wifi more secure than one without a password?
When connecting to a public Wifi from a café for example, some don't use a password and some do. If they do use a password it is often publicly known to everybody around.
Does having a password on ...
4
votes
2answers
507 views
Giskismet query, how to select specific data?
I’m basically trying to get some stats from my war drive kismet database using giskismet but I’m finding it difficult to get specific data.
Things I'm trying to do:
Count how many wireless BSSID’s ...
4
votes
3answers
183 views
Security in wireless ad hoc sensor network (without physical access)
I want to know without taking physical access, what are the methods that can steal the data in a node.
When talking about eavesdropping, how can an attacker sniff the packets? Do they need to listen ...
4
votes
1answer
3k views
Bypassing a captive portal with tor
I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules.
What I have found recently is that simply by using Tor, I can also bypass a ...
4
votes
1answer
624 views
What makes PINless Wi-Fi Direct using WPS on Android secure?
I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup),
and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
4
votes
3answers
1k views
WiFi security from another authorized user (roommate)
I believe we use WPA or WPA2 encryption.
To what extent can another user monitor my traffic?
Monitor my desktop activity?
View documents I've saved on my computer?
Tell what sites i visit?
Tell ...
4
votes
3answers
334 views
Why does switching to “n-only” help preventing attacks on WPS?
I just cracked the ap of a friend of mine (Linksys E4200) and we were looking for a way to rid him of the vulnerabilty. Unfortunately the E4200 does not disable WPS when you tell it to (via web gui).
...
3
votes
4answers
225 views
Is it possible to configure any of wifi protocols so that the network is undetectable?
I am wondering if it possible to configure my DD-WRT router so that the wifi network I am using is undetectable - impossible to tell if there is any network broadcasting even if there are clients ...
3
votes
3answers
356 views
Wireless security attack techniques
Before I ask for some advice, please don't assume I'm a script kiddie or such. This is for one of my wireless security class (CSS 1015).
It's a Saturday class and only 6 students are in the class ...
3
votes
3answers
9k views
Can a hacker sniff others' network data over a wireless connection?
Provided that the hacker knows the WiFi password if any (WEP or WPA), is he capable of sniffing network data of other hosts connected to the same access point?
3
votes
2answers
199 views
how to monitor a Wifi (802.11) network?
How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
3
votes
2answers
362 views
OS Fingerprinting for Android
Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
3
votes
2answers
288 views
intrusion detection on own hotspot?
Is it possible to detect failed logins on the hotspots you create with your windows/linux laptops? So you can detect some dumb brute force/guessing attempts?
For example, a log like this:
TIME DATA - ...
3
votes
3answers
2k views
How do WPA/WPA2 cracking programs know when the PMK/PTK is correct?
I'm doing some pen-testing on my home wlan with aircrack-ng and it got me wondering how programs like these(eg. aircrack-ng, cowPatty, pyrit etc) really work. Specially, when performing a ...
3
votes
2answers
297 views
What additional difficulties are present in performing ARP poisoning on a secure wireless network (WEP, WPA) vs. an insecure one?
I just finished a project in which I coded a man in the middle attack on an unsecure network. I've tried to see how feasible it would be to extend this a secured network. Some internet searching has ...
3
votes
2answers
636 views
How is WEP/WPA2 key derived?
When I was a kid, WEP had a 40 bit key. Later, they came out with a 128-bit key. But as we all know, WEP was so badly-designed that the RC4 key length didn't really matter much.
Ignoring this, my ...
