Security for 802.11 wireless networks.

learn more… | top users | synonyms

22
votes
15answers
5k views

How to block or detect user setting up their own personal wifi AP in our LAN?

Recently, I found a user plug a USB Wifi stick on his desktop, and set up an AP without password. How can we detect or block this via firewall rules or other approach?
7
votes
6answers
928 views

Can my WIFI Home router be brought down to cause me to connect to a fake AP?

I am wondering if this scenario may happen - described from the users point of view: Being connected to my home router, the connection suddenly breaks. So I go to the wireless network adapters drop ...
6
votes
2answers
448 views

What risks does WPA carry?

A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
3
votes
2answers
348 views

Wi-fi security using WPA or WEP

In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
8
votes
1answer
354 views

Can WiFi absorbing wallpaper absorb enough signal to provide a legitimate security benefit?

This French website reports that a wifi-absorbing wallpaper provides a security benefit. Is there any legitimate support for this, assuming that most rooms have windows, and signal can escape from ...
1
vote
3answers
389 views

What are the risks of a rogue Access Point? What lessons can be learned from the Wifi Pineapple?

I'd like to educate colleagues and peers on rogue access points using the tool "Wifi Pineapple". What are some specific security-related lessons I could demonstrate? If applicable, what are the ...
0
votes
2answers
554 views

Is a VPN the only way to protect against rogue Wifi access points MITM attacks?

Given that it's very easy set up a rogue access point and MITM that connection, is a VPN to a trusted host the only real way to secure my browsing and other TCP/UDP actions? This question relates to ...
2
votes
1answer
626 views

Airbase-ng & Metasploit the perfect pair

So if I am running an airbase-ng soft AP, I have several clients connecting to me. I can run metasploit against them once they are connected manually, but that is oh too much effort. Is there anyway ...
3
votes
3answers
469 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
3answers
1k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
4
votes
3answers
237 views

Security in wireless ad hoc sensor network (without physical access)

I want to know without taking physical access, what are the methods that can steal the data in a node. When talking about eavesdropping, how can an attacker sniff the packets? Do they need to listen ...
5
votes
4answers
1k views

MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?

While stress testing my router using MDK3, I got the message "REALLY BIG WARNING!!! Seems like a client connected to your target AP leaks PLAINTEXT data while authenticating!!" I viewed the tool ...
9
votes
4answers
6k views

Preventing deauthentication attacks

I am helpless against some kiddy with backtrack who repeatedly uses aireplay-ng to deauthenticate legitimate users on my Wifi work network. I captured and analyzed the network traffic on my Wifi work ...
1
vote
1answer
1k views

How to view which mac addresses are connected to some AP?

I set up an open AP. I know I can view mac addresses of connected users via AP's console (local console). this is not what I need. I use tool like Netstumbler or inSSIDer on my Win 7 machine to see ...
2
votes
1answer
994 views

Should we block all plaintext authentication and require authentication over an encrypted channel?

Should we configure our servers to require the authentication happen over an encrypted channel and block all methods of unencrypted, plaintext authentication over? I recently configured my servers to ...
5
votes
4answers
796 views

How can one defend against DoS attacks at the physical layer?

Of course, there's always the odd issue of old microwaves and wireless telephone handsets interfering with Wi-Fi performance. And, in many areas, there's a fair chance that you're going to have to ...
2
votes
1answer
609 views

What kind of wifi network does not have any protection and yet it's not an open network?

When I browse thru the list of wifi networks in my neighbour, I see a couple of unprotected networks (with no wpa/wpa2 or wep protection). When I try to connect, I cannot. These networks belong to ...
5
votes
3answers
646 views

What does WEP access point show during aircrack-ng attack?

I bought an old, used WRT-54G () which strangely enough, was running DD-WRT v24-sp2. Weird what turns up at yard sales. I want to try the "aircrack-ng" WEP cracking procedure on it. The criteria ...
4
votes
1answer
8k views

Is my router vulnerable if WPS is enabled but WPS pin code is disabled?

I was reading about Reaver and wi-fi protected setups (WPS). In my Netgear router I have the option to disable the WPS pin code, but still have the WPS push button enabled. Am I secured with such ...
2
votes
2answers
687 views

Encrypt WiFi connection per connected user

One of the questions that comes on quite often is about WiFi encryption. Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
1
vote
0answers
91 views

Turn Binary Data into Airborne Packets? [closed]

Are there any software libraries and/or wireless drivers that make it possible to turn a sequence of binary data into a wireless packet in the air? For example, if someone used Airpcap/Wireshark to ...
1
vote
2answers
1k views

Can an insecure wifi connection block users who download a lot, from say: torrents or usenet? [closed]

Can an 'insecure community network' have automated features to block internet or slow speeds on computers which download a lot, from say: torrents or usenet? I have two computers and one has ...
-3
votes
1answer
128 views

Insecure community network connection problems [closed]

I live at an apartment complex which provided free wifi. My problem is I cannot get a good signal in my bedroom. In the living room my desktop (with a wifi Rosewill PCI-e adapter) gets an excellent ...
4
votes
3answers
4k views

WiFi security from another authorized user (roommate)

I believe we use WPA or WPA2 encryption. To what extent can another user monitor my traffic? Monitor my desktop activity? View documents I've saved on my computer? Tell what sites i visit? Tell ...
2
votes
2answers
580 views

Low level attacks on WLAN/LAN connection while connected to VPN

Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)? I know, that there have been questions like this - but I'm not asking ...
1
vote
3answers
420 views

Attaching hotspot to existing network - can it be secured?

I used to work for a company that did wireless hotspots, and this is the challenge that was given to me one day. I don't believe there is a secure solution to it, but it still bugs me for some ...
2
votes
1answer
5k views

Why it does not matter whether you type HEX or ASCII as WEP WiFi password?

I know that I can pass password in HEX as a keyphrase to WiFi network using WEP encryption as well as ASCII. But somehow you cannot get the ASCII when you only know HEX value. Can anyone explain the ...
3
votes
0answers
109 views

How to find rogue access points? [duplicate]

Possible Duplicate: Tracking down a rogue access point Rogue access points can pose a threat, when employees connect to them. What are some techniques that can be used to find these ...
2
votes
3answers
263 views

What are some good references discussing the pros and cons of a company Wi-Fi network for personal use?

I am a software developer at a company that currently does not allow associates to use personal devices at work (ethernet and guest wi-fi alike). This makes it very hard to work on side projects (like ...
1
vote
1answer
363 views

wireless: Jamming or interference? [closed]

I'm currently in a hotel trying to access the internet through the wireless offered by the hotel. WPA2-Personal network, password consisting of 16 numbers. Connecting to the wireless works fine, ...
5
votes
2answers
5k views

Do VPNs provide sufficient protection over public wireless networks?

I know that VPNs are the standard way to secure communication between a remote user and their primary network, but I've never felt entirely comfortable relying on them when using an open wireless ...
5
votes
3answers
13k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
1
vote
1answer
664 views

Testing my network using aircrack-ng not working

I an using Fedora 17 With Intel 5100 card. When I execute the command: [root@fedora user]# aireplay-ng -9 mon0 10:26:46 Trying broadcast probe requests... 10:26:46 Injection is working! 10:26:48 ...
1
vote
3answers
2k views

How wep wireless security works?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless securiy. From this wikipedia article I have got a basic Idea. But I still don't get what the initialize vector is? Is ...
0
votes
2answers
290 views

How to securely set up wifi? [duplicate]

Possible Duplicate: How to secure a WiFi network? It seems like a simple question but I've thought about this for a while and have done quite a bit of Google searching. There's a LOT of ...
6
votes
3answers
1k views

What are potential security risks when using an insecure wireless connection?

If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it posse a threat even if the person is using a secure application layer protocol? What I mean by ...
1
vote
2answers
170 views

I want to remove my WAP access list

Background: Fabrication of data is a high security concern Interception of (most) data is a low security concern Destruction of data is a medium security concern (everything is backed up, but ...
9
votes
4answers
420 views

How should I tell an organisation that they are vulnerable when I wasn't given permission to check?

I was recently at a village hall (in the UK), some distance from where I live, for a party. I noticed that they had unsecured wi-fi with an SSID of NETGEAR. I assumed it was free wi-fi for users of ...
7
votes
1answer
16k views

Wireless client isolation - how does it work, and can it be bypassed?

Many SOHO routers these days support a feature called "wireless client isolation", or similar. What this is supposed to do, in principle, is to limit the connectivity between wireless clients ...
10
votes
2answers
4k views

Can someone get my WPA2 password with honeypots?

Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
4
votes
6answers
12k views

Recommend Length for Wi-FI PSK?

I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
0
votes
1answer
3k views

Is this possible to use fake AP to get wpa keys? [duplicate]

Possible Duplicate: Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP? Is it possible to get the WPA preshared key with a fake AP with the same SSID ?
4
votes
3answers
1k views

How do I protect myself against 'hole 196'?

I came across this question a while ago and read about hole 196. Is there something I can install on my laptop to protect it against WPA2 Hole196? Software (such as Snort or DecaffeintID) can ...
10
votes
5answers
8k views

Is my computer at risk of being hacked when using public Wi-Fi?

I'm sitting at a cafe, using their public Wi-Fi. I don't go on sensitive sites; I basically go to a music site and listen to a live stream, for which there's no login. I don't check my email or visit ...
1
vote
2answers
21k views

Wifi WPA cracking with reaver

Hello! This question for anyone who tried or succeeded to crack wifi wpa/wpa2 keys with backtrack linux and reaver. So, I wanted to test on my wifi router. I started everything as described here. But ...
5
votes
1answer
320 views

What is this hotspot doing to my traffic?

I'm currently staying at a Four Seasons resort using their Wifi. I noticed that while surfing all non-https sites, my webpage seems to be forced into a frame. For example, here is what google's ...
7
votes
3answers
763 views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
2
votes
1answer
2k views

How can I decrypt traffic on a WEP encrypted network?

Let's say that I am connected to a WEP Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the cryptographic key? I found ...
-2
votes
2answers
285 views

Is Wi-Fi Protected Setup still safe? [closed]

According to this paper it is cracked: http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf Using Reaver.
3
votes
2answers
436 views

intrusion detection on own hotspot?

Is it possible to detect failed logins on the hotspots you create with your windows/linux laptops? So you can detect some dumb brute force/guessing attempts? For example, a log like this: TIME DATA - ...