Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
2answers
245 views

Wifi Sniffing Prevention

I share my wifi with my brother. Recently I came to know he is sniffing on my browsing. Is there a way I can prevent him from sniffing on my browsing? PS: I can't afford VPN.
1
vote
1answer
270 views

Secure connection between two clients inside a wifi without internet connection

I'm currently trying to understand secure connections inside a WiFi network without an Internet connection. I would like to use some sort of SSL tunneling inside a WiFi network between two clients. ...
0
votes
1answer
585 views

Detect possible router attack attemp

I have huge problem with my router: Sagem F@st 3202. Here are some Security log events: Inbound Traffic | Blocked - Default policy | TCP XX.XX.XX.XXX:80->XX.X.XX.XX:51707 on ppp0 ...
7
votes
2answers
1k views

Devices with cryptic names and Chinese ip addresses connected to my router

Please see image. Does anyone have any idea of whats going on? They come and go as attached devices in my attached devices list. I also attached my routers log for you all to see. ...
0
votes
3answers
3k views

Wifi hack and computer hack?

Yesterday, I woke my computer up from sleep mode (it had been on all day while I was at work). And my browser was open to an email account that was not mine. Is it possible for someone to hack your ...
2
votes
1answer
2k views

WPA/WPA2 networks cracks methods

There are some software that states that can crack WPA networks, however that is not an easy task as the initialization code for WPA2 uses a four-way handshake to properly initialize all of the ...
1
vote
3answers
2k views

Can an attacker sniff physical network traffic through WiFi?

So, I am wondering - is it possible for an attacker to sniff traffic on an Ethernet connection if they are not physically plugged into the modem/router hardware but they are connected through wifi? In ...
1
vote
1answer
14k views

Does Kismac 0.3.3 (0.3.3) work on Mac OSX 10.8.2 [closed]

Does Kismac 0.3.3 (0.3.3) built on February 7th work on Mac OSX 10.8.2 It doesn't seem to scan for me. Both are the latest versions as of today.
0
votes
2answers
818 views

Heartbleed client side attack: What can the attacker obtain? [duplicate]

If I have got this right in my head it would be a simple enough task to combine arp spoofing on a public WiFi to redirect clients to an evil SSL server which sends malformed heartbeat requests or to ...
1
vote
0answers
137 views

Neutralizing or Migitating ARP spoofing once detected

I've seen a few methods to detect ARP Spoofing attacks through code(such as this), and ways to defend against these attacks through software and switches (like arp spoofing protection on LAN). How ...
1
vote
3answers
954 views

Wireless LAN router fingerprinting

Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting. I know I can find ...
-1
votes
1answer
746 views

Unknown device accessing my WiFi hotspot? [closed]

My personal hotspot is accessed from an unknown site when I am in my home. Everyone in my home owns apple products but samsung android appears in network in system profiler. Active services ...
0
votes
1answer
250 views

Why are cryptographic algorithms implemented in the data-link layer in wireless networks?

Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
9
votes
4answers
3k views

What features should I look for in a Wifi card used for wifi snooping / penetration testing?

I'm looking to purchase a wifi card to help me learn about wifi network penetration testing and other associated issues but I was wondering if there were any features of a wifi card I should look out ...
7
votes
2answers
2k views

Does WiFi SSID spoofing also affect known password protected networks?

I read quite a bit from Troy Hunt about spoofing WiFi SSIDs and luring devices to connect to them. When the Pineapple device sees a probe request it will create a WiFi with the probed SSID. The naive ...
-1
votes
2answers
1k views

If someone knows my wi-fi password, will he know what I am doing? [duplicate]

I just told my friend my Wi-Fi password, will he know what I am doing even though he does not connect to my home internet?
-1
votes
4answers
264 views

My router is opened to the internet [closed]

I typed in my IP into my address bar and my router admin page came up. Is this safe? How can I disable it? It's Linksys Smart Wifi
2
votes
2answers
488 views

Wireless Positioning System (WPS) works without Internet?

As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
0
votes
1answer
76 views

Safely creating and communicating within a fully decentralized p2p network

I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong. I've been looking into the practical implications of ...
2
votes
2answers
152 views

Are there any known attacks for a laptop with the wifi connection turned off?

I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
3
votes
5answers
8k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...
2
votes
3answers
3k views

How to detect the “Hello packets” sent by a wifi enabled smartphone

Actually I have a case where I should able to detect the mobile phones and get some data about the device available in my network range without connecting to the network. I have seen somewhere that a ...
1
vote
3answers
4k views

Intercepting wifi traffic

So people always talk about how if you use http over a shared wifi hotspot, people will be able to see your unencrypted data, but I have never been able to make the direct connection from a network ...
3
votes
1answer
1k views

How the shopkeepers are getting MAC address of wifi enabled smartphones

It is clear that some big mall's are tracking all the wifi enabled mobile phones before they are connected to the network..how can it been done? I have the similar issue.. how to get the MAC address ...
4
votes
4answers
3k views

Can one connect to wireless router without cracking WPA2 handshake?

Is it possible to re-broadcast the appropriate parts of a captured four way handshake and connect to the router? If not why so?
4
votes
5answers
1k views

Can the wifi administrator in a shared office see mail sent through outlook?

I am hot desking in the same office as a potential competitor & would be using the same wifi. The building owner runs the competitor company. My question is, can the wifi administrator see mail I ...
4
votes
2answers
123 views

Should I set different passwords for different Wi-Fi bands?

My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them. Now, since cracking just one of the two means that the attacker would ...
0
votes
3answers
1k views

Reaver returns different WPS PSK and AP SSID each time it finds correct PIN

I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
0
votes
3answers
7k views

How to sniff traffic on my wireless network?

For educational purposes, I want to see what packages are sent over my home wifi with VPN on and off. What program should I use for this?
0
votes
1answer
184 views

wifi devices connected even if they give a wrong password, how can i use this vulnerability

I have an access point that subscribes in the list of connected devices all the devices that try to connect to it, even if they give a wrong password. The device does not give them an IP address but ...
2
votes
0answers
262 views

What causes wifi network connections to timeout? [closed]

i was wondering what actually causes wifi network connections to timeout. for instance, say my laptop is connected to my wifi and i yank the battery out such that my laptop can't send any proper ...
3
votes
1answer
248 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
1
vote
1answer
131 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
11
votes
2answers
2k views

What is the purpose of changing the default SSID?

Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
0
votes
1answer
580 views

WPA/PSK Dictionaries

So i have been reading some articles on WPA/PSK encryption, And one said that the hash is calculated like this: Key = PBKDF2(passphrase, ssid, 4096, 256) Where PBKDF2 is a standardized method ...
1
vote
3answers
134 views

Why does changing physical router not warn of possible man in the middle attack?

Situation I swapped out a dead router at home today. I setup the new router with the same SSID and encryption settings. The devices on my network acted like nothing had happened and are happily ...
1
vote
3answers
495 views

Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?

Mobile devices like smartphones and tablets have the feature to autoconnect to wireless networks of known name. The same is with laptops and other hardware using WPA2. Is it possible to: a. Obtain ...
0
votes
2answers
232 views

How to find out the Chaff packets of WEP?

I have a cap file in which I have lots of 802.11 packets encrypted with WEP key. The problem is lots of Chaff packets of WEP is included in that. I want to remove the Chaff packets and crack the key. ...
1
vote
2answers
412 views

Idea for hiding your mobile phones' location, and still be able to place and receive calls. Any suggestions?

The diagram below is a thought experiment that could provide a certain level of privacy to mobile (smart)phone users, beyond what they currently have. Some of it is purely theoretical, but it should ...
2
votes
2answers
746 views

Exploiting free WIFI security

So I was watching some Backtrack learning videos and similar stuff, and noticed how there is always talk about getting people's information. For example if someone using unsecured WIFI you can see ...
0
votes
1answer
340 views

Shall I enable 'send all traffic over VPN' on my Mac?

I want my Mac to be as secure as possible, but I don't know if the send all traffic over VPN option is safe or not. Please can someone explain if it is more secure to enable it or not.
4
votes
2answers
541 views

intrusion detection on own hotspot?

Is it possible to detect failed logins on the hotspots you create with your windows/linux laptops? So you can detect some dumb brute force/guessing attempts? For example, a log like this: TIME DATA - ...
5
votes
3answers
26k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
3
votes
2answers
2k views

IP cameras or webcams and wifi/network security

If I have a: router with stateful packet inspection turned on, plus WPA2 security on the wifi network an IP camera or webcam connected to this Wifi network Is there any way to ensure that: ...
2
votes
1answer
4k views

Why is a CA certificate required for EAP-TLS clients?

When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate. It's ...
3
votes
2answers
1k views

Wifi pineapple “Karma”

if a wifi pineapple does a karma attack and a client connects to it would you get the password((for the original wifi) or would the client just connect to you? (Side question is there anyway to stop ...
4
votes
1answer
266 views

Securing wifi with encryption

So I have been hearing that using WPS Pin is not secure at all and that there are available downloads that can brute force attack the pin until it uncovers it depending on what encryption you use. I ...
-1
votes
1answer
106 views

Why not plug DeAuth

They way I understand DeAuth-ing a user on a wireless network is this: The attacker pretends to the AP he is the user and to the user he is the AP. He then tells the AP (as a user) "I need to ...
4
votes
4answers
3k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
3
votes
2answers
1k views

Wifi security SSID clarification

I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand. Is there a best practice for SSID naming? I know that changing the ...