Security for 802.11 wireless networks.

learn more… | top users | synonyms

8
votes
3answers
9k views

How to best set up public WiFi without giving access to the rest of my network?

For reference, this is just for my home network. Anyway, I have quite a few of my neighbors ask me to share my internet with them. I'd really like to eliminate this "here's the password" portion ...
7
votes
4answers
1k views

How to check if wifi is safe while travelling?

I'm quite a bit of a traveller. So i tend to just stay with my smartphone and sometimes notebook. I'm not a security expert but i would like to check how to know if wifi is safe to use. For example, ...
7
votes
6answers
726 views

Are smartphones at least as safe as “regular” computers for personal data?

Like a lot of people, I pretty much run my life on the Web these days. I use online bill pay, I shop at Internet retailers, I keep in touch with friends electronically, &c. I'm pretty comfortable ...
7
votes
2answers
751 views

Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

As I understand WiFi with a PSK, such as WPA(2)-PSK or WEP, anyone on the same network can decrypt anyone elses packets because everybody has the same key. In which case, if you are not going to ...
7
votes
3answers
879 views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
7
votes
2answers
10k views

In inSSIDer, what is the difference between WPA2-CCMP and RSNA-CCMP?

inSSIDer shows my wireless network as RSNA-CCMP. The settings on the wireless router (Linksys E2000) do not at all seem to suggest an "RSNA" security option. The security filtering options in ...
7
votes
6answers
1k views

Can my WIFI Home router be brought down to cause me to connect to a fake AP?

I am wondering if this scenario may happen - described from the users point of view: Being connected to my home router, the connection suddenly breaks. So I go to the wireless network adapters drop ...
6
votes
2answers
2k views

Dictionary Attack on Wifi

I know a few people with pretty weak passwords. What kind of systems exist to prevent dictionary attacks? Would it make sense to restrict the number of connection attempts in a certain timeframe? ...
6
votes
6answers
16k views

Recommend Length for Wi-FI PSK?

I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
6
votes
4answers
1k views

How to keep secure while browsing on open wifi when SSL VPN is blocked?

After a recent visit to a hotel I was surprised to discover that they blocked access to my OpenVPN server. I often use this as a way to secure my internet traffic when I am on public wireless. ...
6
votes
2answers
800 views

Devices with cryptic names and Chinese ip addresses connected to my router

Please see image. Does anyone have any idea of whats going on? They come and go as attached devices in my attached devices list. I also attached my routers log for you all to see. ...
6
votes
4answers
5k views

Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?

The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
6
votes
2answers
1k views

Would an unnecessarily long password degrade performance of a WPA2 wireless network?

My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ ...
6
votes
2answers
6k views

The new CCMP attack against WPA/WPA2 PSK

The use of Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for WPA/WPA2 PSK is being attacked. This is a trivial attack (offline brute force) against the initial ...
6
votes
1answer
158 views

Wireless auto-join on laptops

Maybe I have the wrong idea but this is a question that has been floating in my head for some time. Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
6
votes
2answers
512 views

What risks does WPA carry?

A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
6
votes
2answers
8k views

Do VPNs provide sufficient protection over public wireless networks?

I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
6
votes
3answers
3k views

How do WPA/WPA2 cracking programs know when the PMK/PTK is correct?

I'm doing some pen-testing on my home wlan with aircrack-ng and it got me wondering how programs like these(eg. aircrack-ng, cowPatty, pyrit etc) really work. Specially, when performing a ...
6
votes
2answers
5k views

Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?

We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
6
votes
1answer
819 views

Are strong WPA2 passwords “good enough” for WiFi security?

I'm currently using WPA2-PSK with CCMP on my home WiFi network for encryption and security. I was a big fan of MAC filtering, until I realized that MAC addresses are publicly sniffable in the 802.11 ...
6
votes
3answers
1k views

What are potential security risks when using an insecure wireless connection?

If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
6
votes
3answers
599 views

wlan security - why is it not possible to protect against deauthentication flooding

Wireless security (Wikipedia) describes security issues due to the fact that wi-fi deauthentication packets are unencrypted: Weak PSK passphrases can be broken using off-line dictionary attacks by ...
6
votes
1answer
1k views

Deploying a campus WiFi network that authenticates against an AD LDAP

We are looking to deploy about 15-20 Cisco 1131ag access points on campus. I have been reading up on different authentication methods, but I don’t know what will be the best long term solution that ...
6
votes
1answer
724 views

How to get hold of and use WPA session keys?

I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
6
votes
4answers
656 views

Has my network/computer been breached?

I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes. A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
6
votes
1answer
3k views

Obtain credentials by spoofing WPA/WPA2 Enterprise network?

I have a large scale wireless network secured using WPA/WPA2 Enterprise authentication. Recently, I was made aware of the possibility that someone may use a dd-wrt router and a computer to spoof the ...
5
votes
7answers
2k views

What security risks exist in cell phone apps' data transfer?

Smartphones apps transfer various types of data over the provider's data network (or wifi, if enabled). What security risks are there in this transfer, and how can the risks be mitigated? I'm not ...
5
votes
4answers
890 views

How can one defend against DoS attacks at the physical layer?

Of course, there's always the odd issue of old microwaves and wireless telephone handsets interfering with Wi-Fi performance. And, in many areas, there's a fair chance that you're going to have to ...
5
votes
3answers
16k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
5
votes
2answers
2k views

Wireless hardware with limited range?

I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity? Several sources have recommended WPA2, but I'd still ...
5
votes
2answers
1k views

Is it safe to log into my bank website over a public wifi?

Is it safe to log into my bank website over a public wifi (like a coffee shop)? I apologize if this is a really dumb question. I realize that the connection between the browser and bank servers ...
5
votes
5answers
9k views

Is a longer WiFi password more secure?

Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
5
votes
2answers
8k views

Detecting the presence of wifi devices

Is it possible, with a normal wifi adapter, to detect present wifi devices in the surrounding? Let's say, is it possible to detect an Iphone with wifi switched on in the range of my wifi adapter? ...
5
votes
3answers
1k views

How to detect whether my network's key is being attempted to be cracked?

I use WPA2 encryption. But I know even that can be cracked with the aircrack suite. And a lot of users may not use strong passwords. I've read that while cracking WIFI keys the only noticeable ...
5
votes
2answers
1k views

How eavesdropping will be performed how can I prevent from eavesdropping

I believe that eavesdropping in a man in middle attack and the message is passing from the client to server the man sitting at ISP or network hackers can look at what message I am sending. Heard that ...
5
votes
4answers
2k views

Two SSIDs on same Access point- not good?

If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...
5
votes
4answers
2k views

MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?

While stress testing my router using MDK3, I got the message "REALLY BIG WARNING!!! Seems like a client connected to your target AP leaks PLAINTEXT data while authenticating!!" I viewed the tool ...
5
votes
3answers
769 views

What does WEP access point show during aircrack-ng attack?

I bought an old, used WRT-54G () which strangely enough, was running DD-WRT v24-sp2. Weird what turns up at yard sales. I want to try the "aircrack-ng" WEP cracking procedure on it. The criteria ...
5
votes
2answers
528 views

How to detect infected machines on my wifi?

I currently live in a building with around 40-50 other tenants (mostly students) and we all share one connection to the Internet using one of 3 wifi routers that are spread throughout the building. ...
5
votes
1answer
715 views

Linux wireless hacking book

I am looking for recommendations on a good wireless hacking book. I would like something more focused towards the defensive, but a healthy knowledge of both would be great. I would also need it to go ...
5
votes
2answers
2k views

How effective is the iOS “Send All Traffic to VPN” setting at deterring Wifi-based attacks?

iOS version 5 and newer has a setting for VPNs to "Send All Traffic" over that VPN. I think that sending all data to a trusted VPN target would ensure privacy of all communication sent over that WiFi ...
5
votes
1answer
9k views

Is my router vulnerable if WPS is enabled but WPS pin code is disabled?

I was reading about Reaver and wi-fi protected setups (WPS). In my Netgear router I have the option to disable the WPS pin code, but still have the WPS push button enabled. Am I secured with such ...
5
votes
1answer
363 views

What is this hotspot doing to my traffic?

I'm currently staying at a Four Seasons resort using their Wifi. I noticed that while surfing all non-https sites, my webpage seems to be forced into a frame. For example, here is what google's ...
5
votes
1answer
6k views

Bypassing a captive portal with tor

I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules. What I have found recently is that simply by using Tor, I can also bypass a ...
5
votes
1answer
2k views

What makes PINless Wi-Fi Direct using WPS on Android secure?

I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup), and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
5
votes
2answers
391 views

Does WiFi SSID spoofing also affect known password protected networks?

I read quite a bit from Troy Hunt about spoofing WiFi SSIDs and luring devices to connect to them. When the Pineapple device sees a probe request it will create a WiFi with the probed SSID. The naive ...
5
votes
3answers
461 views

Why does switching to “n-only” help preventing attacks on WPS?

I just cracked the ap of a friend of mine (Linksys E4200) and we were looking for a way to rid him of the vulnerabilty. Unfortunately the E4200 does not disable WPS when you tell it to (via web gui). ...
4
votes
3answers
28k views

Can a hacker sniff others' network data over a wireless connection?

Provided that the hacker knows the WiFi password if any (WEP or WPA), is he capable of sniffing network data of other hosts connected to the same access point?
4
votes
3answers
1k views

How do I protect myself against 'hole 196'?

I came across this question a while ago and read about hole 196. Is there something I can install on my laptop to protect it against WPA2 Hole196? Software (such as Snort or DecaffeintID) can ...
4
votes
4answers
512 views

What particular concerns should one bear in mind when wardriving?

I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks. Right now, I'm still in the planning stages of this ...