Security for 802.11 wireless networks.
3
votes
2answers
216 views
Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?
I understand that there are many applications such as Snort that do the job for network layer 3 IDS.
From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
3answers
287 views
What are the security implications of phone based keyless entry systems?
I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
3answers
316 views
Effective wireless scanning to meet PCI DSS 11.1?
PCI-DSS section 11.2 requires the business to "Test for the presence of wireless
access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
3
votes
1answer
925 views
Wireless MAC Address Filtering - Authentication/Association
Can somebody explain to me how a wireless AP denies access to the network if the client does not have the correct MAC Address.
Does it not send a probe response when a client has not got a correct ...
3
votes
1answer
356 views
WPA vulnerabilities for pentest
As I am a network&IT enthusiast, I was asked by a friend to pentest his WPA network.
I'm wondering if there is anything else I can do beside a bruteforce attack, trying the KARMA attack on ...
3
votes
1answer
207 views
Does a TMSI change often enough to prevent tracking?
A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores.
However, I don't see ...
3
votes
1answer
3k views
Is my router vulnerable if WPS is enabled but WPS pin code is disabled?
I was reading about Reaver and wi-fi protected setups (WPS).
In my Netgear router I have the option to disable the WPS pin code, but still have the WPS push button enabled. Am I secured with such ...
3
votes
2answers
160 views
How can I tell who's using my cookie information on an open LAN?
I think someone is using my cookie info to log into my Facebook account on a public Wi-Fi network. How can I determine if this is happening and from what IP address?
3
votes
1answer
311 views
captive portal wikipedia article
Something on the wikipedia page regarding captive portals have confused me:
http://en.wikipedia.org/wiki/Captive_portal
When a client requests a website, DNS is queried by the browser. The
...
3
votes
1answer
794 views
ARP-poisoning on wireless network - no packets
I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command:
ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
3
votes
1answer
492 views
How to detect/list rogue computers connected to a WIFI network without access to the Wifi Router interface?
This is what I believe to be an interesting challenge :)
A relative (that lives a bit too far to go there in person) is complaining that their WIFI/Internet network performance has gone down ...
3
votes
2answers
151 views
Measuring SNR to detect jammers in Wi-Fi networks
I'm trying to figure out a way to detect a Wi-Fi 2.4 GHz signal Jammer. I am not looking into
locating the location of the jammer but rather detect the jamming signal. How do i do so using
only ...
3
votes
0answers
192 views
What is the most common default security setting on most consumer and small business Wi-Fi routers? [closed]
I am writing a paper right now which involves Wi-Fi security (I'll spare you the details). A major argument in this area depends on the assertion that Wi-Fi routers come defaulted as open networks (ie ...
3
votes
0answers
107 views
How to find rogue access points? [duplicate]
Possible Duplicate:
Tracking down a rogue access point
Rogue access points can pose a threat, when employees connect to them. What are some techniques that can be used to find these ...
2
votes
4answers
294 views
Which Wifi encryption method is secure?
you may wonder apple just removed ethernet port from new macbooks which means we have to use wifi! i made a wifi hotspot with my windows laptop to use for my macbook (my modem don't have wifi because ...
2
votes
3answers
297 views
Sniffing the sniffer
A sniffs B while B is sniffing C.
What's the traffic in A? Does A catches both B and C traffic or only B's?
2
votes
4answers
353 views
How to Investigate Wi-Fi Intrusion and where to look for evidence?
I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected.
eg. If someone with a wi-fi enabled laptop ...
2
votes
2answers
269 views
Wi-fi security using WPA or WEP
In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
2
votes
2answers
273 views
I fortuitously accessed the configuration of unknown router: how come and what now?
I've encountered a strange thing. I connected to an open Wi-Fi, then I was just fooling around. First, I visited 192.168.0.1 and it was a router configuration page but default password didn't work.
...
2
votes
1answer
1k views
Why it does not matter whether you type HEX or ASCII as WEP WiFi password?
I know that I can pass password in HEX as a keyphrase to WiFi network using WEP encryption as well as ASCII. But somehow you cannot get the ASCII when you only know HEX value.
Can anyone explain the ...
2
votes
1answer
432 views
Should we block all plaintext authentication and require authentication over an encrypted channel?
Should we configure our servers to require the authentication happen over an encrypted channel and block all methods of unencrypted, plaintext authentication over?
I recently configured my servers to ...
2
votes
1answer
312 views
Comprehensive book to study about wireless technology
I am searching for a comprehensive book on wireless technology that covers in detail almost everything about wireless technology, including the related protocols, security, hacks, etc. I know it is ...
2
votes
2answers
267 views
Best way to secure Wi-Fi Direct connection
I have setup WiFi Direct connection between two Android devices by using Wi-Fi Protected Setup (WPS) "push button" for authentication.I also want to secure the connection itself by securing the data ...
2
votes
2answers
396 views
Encrypt WiFi connection per connected user
One of the questions that comes on quite often is about WiFi encryption.
Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
2
votes
2answers
2k views
Do VPNs provide sufficient protection over public wireless networks?
I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
2
votes
1answer
12k views
How long to brute-force WPA password?
Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word.
Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
2
votes
3answers
3k views
intel wireless 5100 AGN adapter to support injection
i ran aireplay-ng -9 wlan0 and it seems that my intel PRO/Wireless 5100 AGN adapter does not support injection. i use Ubuntu 10.10 64bit (2.6.35-25-generic kernel).
is it possible to make the adapter ...
2
votes
1answer
203 views
What kind of wifi network does not have any protection and yet it's not an open network?
When I browse thru the list of wifi networks in my neighbour, I see a couple of unprotected networks (with no wpa/wpa2 or wep protection). When I try to connect, I cannot. These networks belong to ...
2
votes
1answer
280 views
Airbase-ng & Metasploit the perfect pair
So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort.
Is there anyway ...
2
votes
2answers
4k views
aircrack-ng under Win7 — possible?
What needs to be installed to get the full aircrack-ng suite (or the closest possible equivalent) working under Win7?
Should you use VirtualPC, VirtualBox, or VMware Workstation for this?
Should you ...
2
votes
3answers
161 views
What are some good references discussing the pros and cons of a company Wi-Fi network for personal use?
I am a software developer at a company that currently does not allow associates to use personal devices at work (ethernet and guest wi-fi alike). This makes it very hard to work on side projects (like ...
2
votes
1answer
1k views
How can I decrypt traffic on a WEP encrypted network?
Let's say that I am connected to a WEP Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the cryptographic key?
I found ...
1
vote
3answers
617 views
How wep wireless security works?
I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless securiy. From this wikipedia article I have got a basic Idea. But I still don't get what the initialize vector is? Is ...
1
vote
2answers
3k views
How mobile app WiFiKill can cut off internet access to neighbor devices?
There is a program for android- WifiKill which disables wifi internet access of some neighbor peers connected to the same wifi AP. How does this program work? ARP poisoning or some other techniques? ...
1
vote
2answers
119 views
Wifi box produces three SSIDs?
While using a friend's wifi, he said I should use his SSID, let's call it XYZ's Wifi. When I started my Macbook Pro, three SSIDs came up. Two were called XYZ's Wifi and the third was called XYZ's ...
1
vote
1answer
192 views
wireless: Jamming or interference? [closed]
I'm currently in a hotel trying to access the internet through the wireless offered by the hotel. WPA2-Personal network, password consisting of 16 numbers. Connecting to the wireless works fine, ...
1
vote
3answers
610 views
What devices support the permanent addition of an ARP table entry? What tools are available to manage this?
I would like to improve wireless security and certain other on-net security scenarios with a permanent ARP table entry. The idea being that someone on the same subnet or WiFi network will have a more ...
1
vote
2answers
126 views
I want to remove my WAP access list
Background:
Fabrication of data is a high security concern
Interception of (most) data is a low security concern
Destruction of data is a medium security concern (everything is backed up, but ...
1
vote
3answers
344 views
Preventing 3rd party DNS Servers from being used
While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly.
This would seem ...
1
vote
3answers
242 views
Is there a security problem accessing my laptop via WIFI?
I'm developing a web application for mobile devices on my local server in my laptop. My laptop is connected to company network via LAN. And, my project manager, wants to check the web application ...
1
vote
2answers
449 views
Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]
Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet?
I have two computers and one has ...
1
vote
1answer
132 views
How WEP/WPA authentication works in a WiFi environment?
I'm looking on a clear schema that would explain how a computer connect to an WiFi access point (WEP or WPA in any version (1,2)).
The basic schema would be :
Computer looks which AP are available
...
1
vote
2answers
112 views
How do I holistically protect a web service from network and MITM attacks?
I have several financial web services that are accessed over HTTPS, however the client devices may be accessing the web services over untrusted WiFi, through questionable proxies, and possibly ToR ...
1
vote
2answers
216 views
Attaching hotspot to existing network - can it be secured?
I used to work for a company that did wireless hotspots, and this is the challenge that was given to me one day. I don't believe there is a secure solution to it, but it still bugs me for some ...
1
vote
1answer
437 views
Testing my network using aircrack-ng not working
I an using Fedora 17 With Intel 5100 card. When I execute the command:
[root@fedora user]# aireplay-ng -9 mon0
10:26:46 Trying broadcast probe requests...
10:26:46 Injection is working!
10:26:48 ...
1
vote
2answers
211 views
What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?
I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple".
What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
1
vote
1answer
515 views
How to view which mac addresses are connected to some AP?
I set up an open AP. I know I can view mac addresses of connected users via AP's console (local console). this is not what I need.
I use tool like Netstumbler or inSSIDer on my Win 7 machine to see ...
1
vote
2answers
201 views
Wireless LAN router fingerprinting
Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting.
I know I can find ...
1
vote
1answer
210 views
How can wireless router password encrypts data using WEP and WPA
How does the password that we enter (to connect to a wireless network) encrypt the data on the wireless network?
Through my reading I am not sure if the password that we enter is the same as the ...
1
vote
2answers
147 views
hardware required for wifi security system
i am planning to implement one WIFI security system , in which one can lock or unlock door remotely.
As i have serched over internet and i came across
lockitron and schlage
Now what i want to know ...
