Security for 802.11 wireless networks.

learn more… | top users | synonyms

0
votes
1answer
563 views

How dangerous is checking email on open Wi-Fi network

How risky is it to check my email on my smartphone on an open Wi-Fi network (i.e. Starbucks or Old Navy)? Is this only risky if someone is snooping? Do they have to be there, or can they leave a ...
2
votes
2answers
1k views

If password is super long, your wpa / wpa2-psk is safe?

sorry im kinda clueless with this stuff... I heard if you set your wifi password to more than 10 or so digits (and make it complicated), then your wpa / wpa2 psk would be safe. Is that true? If not, ...
0
votes
3answers
413 views

Is there a tool in Kali Linux that get Wi-Fi passwords only by capturing the traffic? [closed]

Tools in Kali Linux generally crack Wi-Fi password by injecting packets. Is there a tool that can crack or get the password only by capturing the traffic?
0
votes
0answers
52 views

How to monitor websites being visited on network? [duplicate]

I want to monitor the websites that are being visited on my wifi network by the different IPs connected to the network. Is there a way to do this, other than Wireshark?
0
votes
5answers
1k views

Monitor websites being visited on network

I need to monitor the websites being visited on my wifi network by the different IPs connected to the network. What is the best way to do this? I spent some time with Wireshark but I feel it is a bit ...
1
vote
1answer
67 views

aireplay-ng is unable to send de-authentication packet [closed]

I executed the following commands to check the password security of my wifi with WPA2 in kali linux (in root) airomon-ng airomon-ng start ...
8
votes
1answer
1k views

Does restricting the names of computers allowed to connect to a wifi network provide any security

In response to a statement elsewhere that MAC address filtering was essentially useless for protecting a wifi network because it was trivially by passable by network attack tools, I was asked if the ...
1
vote
3answers
169 views

A neighbor is using a WEP encrypted router, should I inform them of the security risk? [closed]

Someone in my neighborhood is using a WEP encrypted wifi router. I am not sure who they are yet, but if I find out, should I inform them of the security risks which that poses or are there any legal ...
23
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
-2
votes
2answers
142 views

What is the weakness of aircracking wifi attacks?

I did not come to anything after searching Google for some time. What's preventing someone from just doing an aircrack wifi atack and do any kind of attack once logged on the victims network?
3
votes
0answers
2k views

Bypassing Hotel Wifi authentication using VPN [closed]

I'm currently in a hotel with pay per day WiFi, I have have logged into it a couple of times on my phone. I just turned on my VPN before logging in to the WiFi and it seems to have bypassed the hotel ...
4
votes
1answer
4k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
0
votes
1answer
250 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then I started airodump-ng using this ...
1
vote
1answer
85 views

Padding of 802.11 packet with 0's in libpcap [closed]

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
1
vote
1answer
498 views

Can Hydra and Crunch be used in combination for HTTP-get-form? [closed]

I'm trying to recover my router username and password without resetting the router for educational purposes. I read that Hydra can be used for "brute-forcing" http-get-form authentication that most ...
3
votes
0answers
71 views

If I install a certificate for the purposes of logging into a Wifi connection, is it still safe?

There are some wifi networks (large universities for example) which use HTTPS to get to a login page, and in order to verify that they have not been spoofed, provide the certificate ahead of time ...
1
vote
0answers
298 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
3
votes
1answer
127 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
2
votes
5answers
208 views

Reasons for gathering MAC address list

Suppose there is a password-secured WiFi network that exists to provide users with Internet access only. Edit: Consider a guest/mobile-BYOD network as an example. Since filtering access to a WiFi ...
1
vote
2answers
278 views

Do WiFi passwords remain accessible significantly after logging in?

"... they'll go to the taskbar and look at the properties of the WiFi router to get the password." is a quote from another question on this site, and is in the context of WiFi passwords. The ...
73
votes
16answers
16k views

Trying to keep high school students out of the Wi-Fi network

I'm a teacher and IT person at a small K-12 school. The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
-1
votes
3answers
111 views

Does using reaver crash or bring down a network

Does using Reaver crash or bring down a network? I've googled this and haven't turned up anything. I mean like a home router.
5
votes
2answers
204 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
-1
votes
1answer
560 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
2
votes
0answers
31 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
1
vote
1answer
208 views

Can my identity be revealed through WiFi access?

Assuming I am using a WiFi connection on my Android phone, can somebody also on the network know the particular sites I visit? I believe they will get to know my MAC ID, but will they get to know ...
2
votes
3answers
169 views

Risks associated with HTTP content injection?

I'm curious about the risks associated with HTTP content injection, where an ISP injects content to pages accessed over non HTTPS connections. Some examples: ...
2
votes
2answers
238 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
0
votes
0answers
82 views

Wifi Pineapple :Modifying white list by client

If wifi pineapple maintains a whitelist with specific ssid's, then it responds to only those ssid probes.Is there any method or tools by which I can access/modify/interact with wifi pineapple's white ...
15
votes
8answers
68k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like whatsapp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
0
votes
2answers
343 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
3
votes
2answers
1k views

HTTPS in captive portals and the Apple Captive Network Assistant

Suppose I connect to the Wi-Fi of a company I trust enough to give them my credit card number (say, my local airport). When I connect to their Wi-Fi network, my web browser gets redirected from any ...
0
votes
2answers
225 views

Identifying the correct SSID [duplicate]

Suppose a Wi-Fi network is present with a given SSID. Now I create a hotspot with the same SSID as that of the original network. If a user tries to connect to the Wi-Fi, which one will he connect to? ...
1
vote
3answers
119 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
3
votes
1answer
258 views

Why do inflight wifi networks display a captcha?

When you log on to Gogo Inflight Wifi or similar, Gogo displays a captcha: A CAPTCHA is usually associated with preventing automated traffic from accessing your network; however, to connect to Gogo ...
0
votes
3answers
187 views

Is my LAN infected?

I don't know if this is the right place for this question but here it goes... When I access websites that have Google ads included with a device (pc, tablet, laptop) connected to my LAN, these ads ...
18
votes
3answers
2k views

Are open wireless networks unencrypted?

When you connect to an open wireless network (that is, a wireless network without any symmetric password set) is there any sort of secure key exchange going on, or is data sent back and forth ...
5
votes
2answers
2k views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
-1
votes
1answer
940 views

Sniffing my networks traffic illegal? [closed]

So this is a pretty straight forward question. If I setup a free and open wifi access point called "Free&Tots-Secure" then sniff all the traffic of people that connect to it, does that violate ...
0
votes
2answers
93 views

Does anyone know how / what this technique is called? [closed]

When using public wireless it needs you to sign in and from what I've gathered it allows you to have access to the internet and provides you with your own network and is not shared with any other ...
1
vote
0answers
132 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
-3
votes
1answer
340 views

Personal Network Security -How can I stop getting my Laptop knocked off my Wifi? [closed]

In my neighborhood there are 26 wifi gateways and I keep switching channels. If you split all the gateways on 10 g freq channels plus the n frequency channels that still is enough for all of them. ...
1
vote
1answer
90 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
1
vote
1answer
186 views

Suspicious wifi networks from distant places and hotels

When I check my Macbook's network settings, I see some unfamiliar wifi networks from distant places like famous hotels. It's impossible to connect to those networks because I've never been to those ...
-1
votes
4answers
3k views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
3
votes
3answers
189 views

What previously-unknown Wifi access points will devices automatically connect to?

I was reading an article on an iOS8 SSL exploit on The Register when one quote caught my eye: “Anyone can take any router and create a Wi-Fi hotspot that forces you to connect to their network, ...
0
votes
0answers
29 views

fake ap with password [duplicate]

I cannot speak English well, sorry. What happens if we create a fake AP with linset on kali linux and we disconnect the target. He would then connect to our AP and when he wants to go to a site he ...
0
votes
1answer
817 views

can a fake AP have password? [closed]

I cannot speak English well, sorry. What happens if we create a fake AP with linset on kali linux and we disconnect the target. He would then connect to our AP and when he wants to go to a site he ...
0
votes
2answers
312 views

Is it possible for hackers hack my PC by creating fake AP that my PC probed

I heard that hackers can create fake AP that my PC is probing. As soon as my PC found the Fake AP, it will connect automatically. So To clarify, is it possible for hackers create the Fake AP that my ...
5
votes
1answer
8k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...