Security for 802.11 wireless networks.

learn more… | top users | synonyms

4
votes
1answer
3k views

Is brute-forcing the only way to crack WPA?

I don't know much about how WPA algorithms work internally. Is brute-forcing an AP the only way to crack WPA? (or to get associated with AP) Another question is about Reaver-WPS, what if an access ...
4
votes
2answers
96 views

Should I set different passwords for different Wi-Fi bands?

My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them. Now, since cracking just one of the two means that the attacker would ...
4
votes
1answer
527 views

Hotspot with same SSID, how does authorization work?

My university has a wireless network I log into with my username and password. It's using PEAP. My phone and laptop automatically connect to this SSID when they detect the network. If someone sets up ...
4
votes
1answer
493 views

Stealing WiFi Internet connection

I received a mail about illegally sharing copyright-protected material on the Internet; I never did it. I checked my router's configuration and noticed that the MAC address of one of the connected ...
4
votes
2answers
4k views

Estimated cost to make a brute-force WPA2 attack feasible

It's been shown that a brute-force attack on WPA2-Personal is possible in a reasonable amount of time. These successful attacks appear to be limited, however, to researchers who have the budget to ...
4
votes
1answer
104 views

Tracing Wireless Card

Let's say that hypothetically someone had broken into a WiFi connection. We can't find any evidence of whom it is via sniffing the traffic or anything of the sort. Is there any way to triangulate ...
4
votes
3answers
135 views

Getting automatically logged in to others session via WIFI

Recently i got a very strange behavior on our WIFI network: We share a WIFI network with a simple router. One of us pays the bills and he's the one, who got the management account from our ISP. So if ...
4
votes
1answer
742 views

Is a public known password protected Wifi more secure than one without a password?

When connecting to a public Wifi from a café for example, some don't use a password and some do. If they do use a password it is often publicly known to everybody around. Does having a password on ...
4
votes
2answers
677 views

Giskismet query, how to select specific data?

I’m basically trying to get some stats from my war drive kismet database using giskismet but I’m finding it difficult to get specific data. Things I'm trying to do: Count how many wireless BSSID’s ...
4
votes
3answers
237 views

Security in wireless ad hoc sensor network (without physical access)

I want to know without taking physical access, what are the methods that can steal the data in a node. When talking about eavesdropping, how can an attacker sniff the packets? Do they need to listen ...
4
votes
1answer
8k views

Is my router vulnerable if WPS is enabled but WPS pin code is disabled?

I was reading about Reaver and wi-fi protected setups (WPS). In my Netgear router I have the option to disable the WPS pin code, but still have the WPS push button enabled. Am I secured with such ...
4
votes
2answers
282 views

Can botnets be injected through open wifi to smartphones?

I have read this paper, which is answers part of the question. It answers, 'open wifi will help increase the spread speed and impact' but what I want to know is, can you 'plant' an open wifi access ...
4
votes
3answers
4k views

WiFi security from another authorized user (roommate)

I believe we use WPA or WPA2 encryption. To what extent can another user monitor my traffic? Monitor my desktop activity? View documents I've saved on my computer? Tell what sites i visit? Tell ...
3
votes
4answers
313 views

Is it possible to configure any of wifi protocols so that the network is undetectable?

I am wondering if it possible to configure my DD-WRT router so that the wifi network I am using is undetectable - impossible to tell if there is any network broadcasting even if there are clients ...
3
votes
1answer
450 views

Is it really true that Google knows most of the worlds wifi passwords

Computer World is reporting that Android devices phoning home have given Google a database with almost every wifi password in the world to it. Is this groundless hysteria, or a genuine concern? If ...
3
votes
3answers
441 views

Wireless security attack techniques

Before I ask for some advice, please don't assume I'm a script kiddie or such. This is for one of my wireless security class (CSS 1015). It's a Saturday class and only 6 students are in the class ...
3
votes
2answers
1k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
3
votes
5answers
3k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...
3
votes
2answers
792 views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
3
votes
2answers
348 views

Wi-fi security using WPA or WEP

In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
3
votes
2answers
437 views

intrusion detection on own hotspot?

Is it possible to detect failed logins on the hotspots you create with your windows/linux laptops? So you can detect some dumb brute force/guessing attempts? For example, a log like this: TIME DATA - ...
3
votes
2answers
122 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
3
votes
2answers
312 views

What to do when GSM/Wifi is jammed and ethernet cables are cut?

So.. There are household alarm systems (to defend against burglars) which send SMS/e-mail alerts if an intruder has been detected or an alert is trigged. However, Mobile networks can be jammed, and ...
3
votes
2answers
525 views

What additional difficulties are present in performing ARP poisoning on a secure wireless network (WEP, WPA) vs. an insecure one?

I just finished a project in which I coded a man in the middle attack on an unsecure network. I've tried to see how feasible it would be to extend this a secured network. Some internet searching has ...
3
votes
2answers
847 views

How is WEP/WPA2 key derived?

When I was a kid, WEP had a 40 bit key. Later, they came out with a 128-bit key. But as we all know, WEP was so badly-designed that the RC4 key length didn't really matter much. Ignoring this, my ...
3
votes
2answers
338 views

Does WPA2 Enterprise mitigate evil twin attacks?

One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
3
votes
2answers
386 views

Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?

I understand that there are many applications such as Snort that do the job for network layer 3 IDS. From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
3answers
469 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
2answers
469 views

Wifi pineapple “Karma”

if a wifi pineapple does a karma attack and a client connects to it would you get the password((for the original wifi) or would the client just connect to you? (Side question is there anyway to stop ...
3
votes
1answer
153 views

Securing wifi with encryption

So I have been hearing that using WPS Pin is not secure at all and that there are available downloads that can brute force attack the pin until it uncovers it depending on what encryption you use. I ...
3
votes
3answers
1k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
3
votes
1answer
19k views

How long to brute-force WPA password?

Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word. Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
3
votes
1answer
2k views

Wireless MAC Address Filtering - Authentication/Association

Can somebody explain to me how a wireless AP denies access to the network if the client does not have the correct MAC Address. Does it not send a probe response when a client has not got a correct ...
3
votes
1answer
396 views

WPA vulnerabilities for pentest

As I am a network&IT enthusiast, I was asked by a friend to pentest his WPA network. I'm wondering if there is anything else I can do beside a bruteforce attack, trying the KARMA attack on ...
3
votes
4answers
1k views

Can one connect to wireless router without cracking WPA2 handshake?

Is it possible to re-broadcast the appropriate parts of a captured four way handshake and connect to the router? If not why so?
3
votes
1answer
380 views

Measuring SNR to detect jammers in Wi-Fi networks

I'm trying to figure out a way to detect a Wi-Fi 2.4 GHz signal Jammer. I am not looking into locating the location of the jammer but rather detect the jamming signal. How do i do so using only ...
3
votes
1answer
587 views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
3
votes
2answers
189 views

How can I tell who's using my cookie information on an open LAN?

I think someone is using my cookie info to log into my Facebook account on a public Wi-Fi network. How can I determine if this is happening and from what IP address?
3
votes
1answer
363 views

captive portal wikipedia article

Something on the wikipedia page regarding captive portals have confused me: http://en.wikipedia.org/wiki/Captive_portal When a client requests a website, DNS is queried by the browser. The ...
3
votes
1answer
1k views

ARP-poisoning on wireless network - no packets

I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command: ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
3
votes
1answer
82 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
3
votes
2answers
135 views

How are WPA Keys stored on a router?

Should the router only store a hash of my encryption key or is it stored as plaintext? I believe (but not certain) that the WPA key is itself an encryption key, buy shouldn't that be encrypted like ...
3
votes
1answer
188 views

Strange packets coming over wireless, looking for clues

While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
3
votes
2answers
4k views

How to detect/list rogue computers connected to a WIFI network without access to the Wifi Router interface?

This is what I believe to be an interesting challenge :) A relative (that lives a bit too far to go there in person) is complaining that their WIFI/Internet network performance has gone down ...
3
votes
0answers
413 views

What is the most common default security setting on most consumer and small business Wi-Fi routers? [closed]

I am writing a paper right now which involves Wi-Fi security (I'll spare you the details). A major argument in this area depends on the assertion that Wi-Fi routers come defaulted as open networks (ie ...
3
votes
0answers
109 views

How to find rogue access points? [duplicate]

Possible Duplicate: Tracking down a rogue access point Rogue access points can pose a threat, when employees connect to them. What are some techniques that can be used to find these ...
2
votes
4answers
463 views

Which Wifi encryption method is secure?

you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
2
votes
4answers
440 views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
2
votes
3answers
329 views

Sniffing the sniffer

A sniffs B while B is sniffing C. What's the traffic in A? Does A catches both B and C traffic or only B's?
2
votes
2answers
145 views

Exploiting free WIFI security

So I was watching some Backtrack learning videos and similar stuff, and noticed how there is always talk about getting people's information. For example if someone using unsecured WIFI you can see ...