Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
1answer
95 views

Does HSTS make using a public WiFi safe?

What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...
4
votes
6answers
478 views

How to choose a good (and easy to use) WiFi password?

Over the last few months I have had to enter WiFi passwords into smart phones, TVs, printers, etc. None of these have real keyboard and they make it hard to enter long passwords or passwords that ...
1
vote
1answer
76 views

How do I associate an SSID to a device?

In other words I am referring to the wlan.fc.type_subtype==0x04 filter in Wireshark while using a WiFi adapter in monitor mode. How can I associate an SSID to an Android device (for example) if that ...
-2
votes
1answer
36 views

Router connected to my ethernet [duplicate]

I'm guessing that someone is bringing his router to provide wifi to his coworkers, by connecting it to a certain point on one of the 8 floors of my building, how can I know where is connected?
3
votes
1answer
139 views

Xfinity Wifi Risk

I recently discovered and would like to use Xfinity Wifi around town. However, it seems like a remarkably dangerous thing to do, even if you do confirm an access point's location via their geo-...
3
votes
1answer
147 views

How wifi sense actually connects to any network?

I read that using Wi-Fi sense, we can share our Wi-Fi networks with others and it stores pre-shared keys on Microsoft servers. Please help me understand the below scenario: I am sharing my network (...
3
votes
3answers
513 views

Sniffing the sniffer

A sniffs B while B is sniffing C. What's the traffic in A? Does A catches both B and C traffic or only B's?
17
votes
3answers
6k views

Can an attacker sniff Mac addresses on a wifi?

If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
8
votes
5answers
3k views

What are potential security risks when using an insecure wireless connection?

If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it pose a threat even if the person is using a secure application layer protocol? What I mean by ...
0
votes
2answers
165 views

Is the typical hotel wifi authentication insecure? [duplicate]

I saw many hotels use unencrypted wifi and then expect you to type in a wifi password over HTTPS. All HTTPS website requests are captured, and you get an "untrusted certificate" warning and HTTP ...
13
votes
3answers
291 views

Did someone impersonate my WiFi?

TL;DR: An unknown WiFi extender showed up in my DHCP logs and my phone routinely connected through that access point. How badly was my network or traffic at risk? This morning, while struggling ...
1
vote
1answer
96 views

How can systems recognize different wifi AP with the same SSID and MAC address

I'm testing, for studying purpose, an evil twin attack. In my scenario I have both the rogue AP made by my laptop and the real AP with the same SSID and MAC address, but with different security ...
1
vote
1answer
117 views

Opensource firmware for WiFi router

I have two routers from D-link which are DIR615 and 2750U. Both of the firmware are upgraded to latest versions. They don't have bandwidth control. Found there are lots of opensource firmware ...
-2
votes
1answer
62 views

Is my iPhone 6S Plus compromised? [closed]

Is it usual practice on an iPhone 6S Plus for the wifi and Bluetooth addresses to be identical except for the very last number? One ends in .44 and the other .45. I've also had a lot of weird things ...
3
votes
1answer
64 views

Detect a Virtual Machine on my Wifi?

Is there a way to detect whether a machine connected to my wifi is a physical machine or a virtual machine?
0
votes
1answer
128 views

How to secure wireless (Wi-Fi) home network [closed]

What are the countermeasures to make home wireless network secure, which will both prevent others from stealing internet and will also prevent hackers from taking control of computers through your own ...
1
vote
0answers
32 views

3G/4G device that's less likely to be backdoored [closed]

I can't use wifi at the moment so my only option is some sort of cellular connection (either through USB modem or mifi hotspot). I have been looking at devices but most seem to be Chinese companies ...
4
votes
1answer
109 views

Is it good idea to use a access point MAC address as wifi password?

I realized that one network I'm connecting with is using a MAC address of one of its interfaces. If an attacker would know that fact, could he somehow obtain the MAC address wirelessly and break ...
0
votes
3answers
110 views

Can WiFi detect you even if you aren't connected

I've read that the way WiFi works is that your computer sends out requests looking for any WiFi it recognizes. I use a MAC spoofer but if there is a WiFi in range before I have time to spoof my MAC ...
1
vote
1answer
156 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
2
votes
1answer
81 views

How do I create a secure public wireless network? [closed]

How do I design a secure public wireless network. I want to offer guest network. But how do I make it secure without making my customer get authenticated with password or username. I have read about ...
25
votes
9answers
4k views

What are the security implications if someone got my home WiFi network password?

I gave my WiFi password to a guest. I'm wondering how can he exploit this opportunity? Like, can he access my other devices localhost servers? Can he brute force to get the password of the router to ...
4
votes
1answer
164 views

How unique should I make my SSID?

Some say that a 32-character random string is a good idea for SSID names: Treat your WiFi network name as you would a password. Make it complex and avoid using any whole words. Maximum length for ...
7
votes
1answer
146 views

Do cellphones periodically send a “hello” msg to nearby WiFi APs?

I recently stumbled on this site, offering cell phone detection solutions: http://www.libelium.com/products/meshlium/smartphone-detection/ Where they state that: Users have to do nothing to be ...
4
votes
3answers
603 views

Secure way to grant access to WIFI network based on dynamic parameters?

I am looking for a way to grant access to a secured WiFi network, based on certain external information? For example, some server on the internet could store MAC addresses that ought to be granted ...
3
votes
0answers
38 views

Reaver stuck at flow_handler

I tried to run Reaver against my router at home using an Ubuntu 15.10 laptop. The command used was: sudo reaver -i mon0 -b XX:XX:XX:XX:XX:XX -vv -c 7 -a (the channel I got from aerodump-ng). I'm ...
6
votes
2answers
1k views

Discovering IP or Mac address of mobile devices passing by.

Is it possible for someone to discover the IP and/or MAC address of my mobile device, even if I do not attempt to connect to their network?
1
vote
1answer
131 views

Can network admin detect an MiTM attack?

I am on a WiFi network with a SonicWall router (I'm guessing this comes with an IDS). If someone on my network launches an MiTM attack on me, will the network admin be able to detect this? Does an ...
4
votes
1answer
561 views

How does Karma's open WiFi network successfully protect its users?

Foreword This question has a lot of build-up, so please scroll down to the bottom if you just want to see the question. Please at least skim the background info, though. Background I ordered a ...
7
votes
1answer
129 views

Preventing evil twin WiFi attacks on embedded systems

I've recently been looking at a few of the low-end WiFi modules used in IoT devices, such as the TLGUA06 and ESP2866. As expected, it's possible to deauthenticate these devices by sending a ...
0
votes
0answers
149 views

Generate password list with specific keywords and length

I need to generate a list of passwords to try penetrating into a wi-fi network. I have a pretty big list of keywords and I want to use them to generate as many possible passwords as possible, which ...
3
votes
1answer
469 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
4
votes
0answers
184 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
1
vote
1answer
114 views

What was the purpose of this attack if one took place?

Background Windows 7 Home Edition HP desktop (no av/no firewall/ remote assistance enabled) two external drives attached/no documents on internal drive connected to fios wifi (wep protection/...
2
votes
2answers
140 views

Laptop had a NSFW page open when I got to work, cause for concern?

I use my personal lap top for work. The other day I took it in an opened it, logged in and there was a NSFW page open from when I last used it at home. I immediately closed the (incognito) page, no ...
48
votes
2answers
4k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...
6
votes
3answers
198 views

Getting automatically logged in to others session via Wi-Fi

Recently, I experienced a very strange behaviour on our Wi-Fi network: we share a Wi-Fi network using a simple router. One of us pays the bills and he's the one, who got the management account from ...
1
vote
1answer
115 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it doesn'...
6
votes
2answers
393 views

Can network admin detect port scan on a certain host?

Say, my laptop is connected to a large WiFi network with many other users. If a port scan is run on my IP by somebody else on the same WiFi network, is it possible for the network admin (or anybody) ...
3
votes
1answer
61 views

Isolate Android system when connected to wifi

Is there any built-in feature or application that isolates the system when it's connected to a wlan, so that just a determined app has access to the net? For example, let's say that you want to ...
2
votes
1answer
136 views

What is the difference between key mechanism in wep and wpa

I haven't found the resources explaining about exact authentication mechanism about wpa-psk in the internet. finally i found securitytube videos i found one video regarding the wpa-psk concepts.in ...
-2
votes
2answers
83 views

Is it possible to locate wifi routers not in your range? [closed]

For example, would it be possible for someone to sit at home, and still see broadcasting networks within a radius of lets say, 50-100miles.
0
votes
1answer
696 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
4
votes
2answers
735 views

I tried to break my WiFi: is 8 uppercase letter strong enough?

My Wi-Fi WPA-PSK password looked pretty weak: 8 uppercase letter. I have checked with another router from the same provider and the pattern is the same. To see how weak this is I tried to hack it ...
0
votes
2answers
3k views

Wireless Adapters for Testing with BackTrack

I would like to begin testing and working with BackTrack. I have heard that the Alfa AWUS036H wireless adapter works well with BackTrack and allows for packet injection. This adapter, however, is ...
7
votes
2answers
496 views

If WPA2-PSK is insecure, what other options do home users have?

from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
-5
votes
2answers
187 views

If someone hacks my wifi connection what if any control do they have over radio waves in my house? [closed]

A couple questions on wifi security. If someone knows my wifi password (be it WEP or WPA) what kind of control do they have over radio waves? Can they emit radio waves from computers on my network? ...
0
votes
1answer
169 views

What attacks or exploits are possible when MAC address, IP, and Port of a WiFi access point are known? [closed]

I just accepted a position at a small firm and was testing the previous WiFi setup for flaws and exploits that were possible. We have two AP's for business and guest connections, everything checks out ...
0
votes
1answer
152 views

can my internet provider see my communications? [duplicate]

Can my ISP see what i am communicating through Skype, Facebook, Yahoo-Mail and so on? I am not asking this from a legal perspective, but only from a technical one. Also I am not talking about ...
1
vote
2answers
145 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...