Security for 802.11 wireless networks.
5
votes
2answers
3k views
Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
1
vote
3answers
344 views
Preventing 3rd party DNS Servers from being used
While using a wireless network recently that implemented a captive gateway, I noticed that any third party DNS servers manually set would not allow the network to connect properly.
This would seem ...
6
votes
2answers
1k views
Dictionary Attack on Wifi
I know a few people with pretty weak passwords. What kind of systems exist to prevent dictionary attacks? Would it make sense to restrict the number of connection attempts in a certain timeframe?
...
7
votes
2answers
444 views
When are HTTP session cookies at risk over Wi-Fi?
If I'm using websites that do not use HTTPS, but I'm on a WEP-protected Wi-Fi network, are my cookies safe from being sniffed by third-parties?
Are cookies only at risk during login, or am I at risk ...
8
votes
6answers
415 views
Doing a demo about open wireless networks exploiting with Firesheep
A collegue and I have been asked to do a demo where we show off stealing Facebook sessions with Firesheep. I've never used Firesheep before myself, but I reckon it should be a simple task.
I know the ...
2
votes
1answer
12k views
How long to brute-force WPA password?
Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word.
Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
5
votes
1answer
274 views
How to detect infected machines on my wifi?
I currently live in a building with around 40-50 other tenants (mostly students) and we all share one connection to the Internet using one of 3 wifi routers that are spread throughout the building. ...
3
votes
1answer
356 views
WPA vulnerabilities for pentest
As I am a network&IT enthusiast, I was asked by a friend to pentest his WPA network.
I'm wondering if there is anything else I can do beside a bruteforce attack, trying the KARMA attack on ...
8
votes
2answers
2k views
Can an attacker sniff Mac addresses on a wifi?
If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
4
votes
4answers
3k views
Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?
The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
8
votes
4answers
1k views
How can an access point spoof me into connecting?
I was reading through the answers of the question "How can I ensure that I connect to the right wireless Access Point?" and was wondering how it is possible for an access point to imitate another wifi ...
21
votes
6answers
5k views
Sharing wifi at a business - Bad Policy?
Is it safe for a small business to let customers use their wifi while waiting?
My friend is starting up a small dentistry practice (1 dentist), and I'm setting up his computers/wifi as a favor. ...
20
votes
9answers
1k views
How can I ensure that I connect to the right wireless Access Point?
Under Windows/Linux, client side. How can I ensure that I'm not connecting to a rogue AP?
Thank you!
1
vote
3answers
242 views
Is there a security problem accessing my laptop via WIFI?
I'm developing a web application for mobile devices on my local server in my laptop. My laptop is connected to company network via LAN. And, my project manager, wants to check the web application ...
4
votes
4answers
381 views
What particular concerns should one bear in mind when wardriving?
I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks.
Right now, I'm still in the planning stages of this ...
5
votes
1answer
2k views
Obtain credentials by spoofing WPA/WPA2 Enterprise network?
I have a large scale wireless network secured using WPA/WPA2 Enterprise authentication. Recently, I was made aware of the possibility that someone may use a dd-wrt router and a computer to spoof the ...
6
votes
1answer
603 views
Deploying a campus WiFi network that authenticates against an AD LDAP
We are looking to deploy about 15-20 Cisco 1131ag access points on campus. I have been reading up on different authentication methods, but I don’t know what will be the best long term solution that ...
10
votes
3answers
3k views
How does FaceNiff work?
FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
12
votes
4answers
864 views
Threat assesment for a captive portal
I am interested in setting up a captive portal on a wireless network.
From what I understand I would do this by initially having all guests in a temporary vlan, moving them to the real vlan when ...
0
votes
1answer
101 views
WLAN Router authentification [duplicate]
Possible Duplicate:
How can I ensure that I connect to the right wireless Access Point?
Is it true, that WLAN routers aren't authenticated by clients? The only "authentication" is SSID and ...
6
votes
1answer
453 views
How to get hold of and use WPA session keys?
I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
7
votes
2answers
445 views
Any advantage to securing WiFi with a PSK, other than to keep out unauthorized
As I understand WiFi with a PSK, such as WPA(2)-PSK or WEP, anyone on the same network can decrypt anyone elses packets because everybody has the same key.
In which case, if you are not going to ...
10
votes
1answer
2k views
Is WPA2 WiFi protected against ARP poisoning and sniffing?
Is WPA2 WiFi protected against ARP poisoning? If not, can the ARP poisoner decrypt the packets?
16
votes
1answer
728 views
WPA significantly less secure than WPA2?
I understand at least theoretically WPA2 is more secure than WPA, but in practice does it make any difference which one you use? From what I know there are no known attacks for either except for ...
6
votes
3answers
386 views
wlan security - why is it not possible to protect against deauthentication flooding
Wireless security (Wikipedia) describes security issues due to the fact that wi-fi deauthentication packets are unencrypted:
Weak PSK passphrases can be broken using off-line dictionary attacks by ...
0
votes
2answers
160 views
How to find out the Chaff packets of WEP?
I have a cap file in which i have lots of 802.11 packets encrypted with WEP key. The problem is lots of Chaff packets of WEP is included in that. I want to remove the Chaff packets and crack the key. ...
4
votes
2answers
1k views
Wireless hardware with limited range?
I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity?
Several sources have recommended WPA2, but I'd still ...
6
votes
1answer
142 views
Wireless auto-join on laptops
Maybe I have the wrong idea but this is a question that has been floating in my head for some time.
Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
7
votes
2answers
8k views
In inSSIDer, what is the difference between WPA2-CCMP and RSNA-CCMP?
inSSIDer shows my wireless network as RSNA-CCMP. The settings on the wireless router (Linksys E2000) do not at all seem to suggest an "RSNA" security option. The security filtering options in ...
1
vote
1answer
207 views
Wireless Access Point security with TEW-638APB
We have a large network that is private, with both eithernet and Wifi access. We'd like to make another smaller network that is wireless, open, and possibly throttled, and not able to access our ...
7
votes
2answers
717 views
What security risks do unauthorized mobile hotspot (MiFi) devices on company proprerty pose?
I'm having some difficulty determining how, or if, MiFi devices on property should be regulated. Personally, I see them as having little difference from any other rogue AP in the environment - the ...
