Security for 802.11 wireless networks.

learn more… | top users | synonyms

3
votes
1answer
60 views

Least riskiest option when it comes to reinstalling the OS

I understand security is a continuum rather than a binary, which is why I'm asking this question. I need to reinstall the OS on my Macbook. However, after a security mishap, I’m far more alert about ...
1
vote
0answers
324 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
1
vote
1answer
146 views

Bluetooth/WiFi Identity tracking in public spaces - How to discover?

Your unique mobile device WiFi MAC addresses as well as your Bluetooth unique address can give away enough information to identify you and track your location in public spaces even if you don't ...
3
votes
1answer
228 views

How can I test my guest network?

I enabled my guest network and put my devices on it so my communications could be separate from the rest of my family on the main network. How can I test this to ensure the guest network really is ...
4
votes
1answer
151 views

Wi-Fi asks to accept (self-signed) certificate – What is it used for?

When I tried to connect to my University's Wi-Fi for the first time, it asked me to accept a (probably self-signed) certificate. Luckily they published the fingerprint so I was sure it is safe to ...
1
vote
0answers
30 views

Connect to Hidden network using wpa_supplicant [closed]

I have router [ssid: wifi_team, pwd: delhi123 and security type: wpa2] as hidden access point and other end wpa_supplicant is running from comand line. I am trying to connect to my router, while ...
13
votes
2answers
27k views

Wireless client isolation - how does it work, and can it be bypassed?

Many SOHO routers these days support a feature called "wireless client isolation", or similar. What this is supposed to do, in principle, is to limit the connectivity between wireless clients ...
1
vote
2answers
657 views

How can I see the websites visited by clients of my WLAN?

How can I view the websites that are visited by the user of my wifi? What tools are required to do this? And one more question: can I see the WhatsApp communications?
2
votes
1answer
535 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
1
vote
1answer
428 views

Sent images on company WiFi network by accident [duplicate]

I know this was stupid, so I don't need to be told that...here goes: I was at work and thought I was on 4G network on my Android phone but after sending a number of nude pics via a social media app ...
0
votes
1answer
781 views

My WiFi (with my own password) is connected to our office network. Is it secure?

Is there a possibility that they can see my browsing history, media transfers, Skype sessions and even FaceTime?
6
votes
1answer
13k views

Bypassing a captive portal with tor

I know that NSXTS and Iodine can be used to bypass a captive portal by taking advantage of permissive DNS firewall rules. What I have found recently is that simply by using Tor, I can also bypass a ...
2
votes
2answers
221 views

How much information can be gathered about a network without connecting?

I'm working on a project that ideally needs to be able to identify local wifi networks, and be able to recall them if they are approached again. Is there any unique identifying information that can be ...
8
votes
1answer
1k views

How does WPA2-Enterprise protect against an evil twin attack?

Original question title: What information do EAP-TLS certificates contain I recently read a couple of topics on stackoverflow, concerning the verification of Wi-Fi access points: How Are Wi-Fi ...
0
votes
2answers
19k views

Can wifi administrator see data transfer over android phone. precisely gmail app communication

sometimes I connect to wifi outside my home in office , restaurants and friends house. I want to know if wifi administrator can see the exact data my android phone communicates? I am only concerned ...
1
vote
1answer
731 views

What are WiFi certificates used for? What are they?

Recently my university updated the certificates for authenticating on their WiFi network. I was hesitant to accept it because I wasn't sure what accepting it entailed or even what it was and what it'...
1
vote
2answers
668 views

What would be the most efficient way of brute forcing a wifi key [duplicate]

I was wondering how can a brut force of my wifi be prevented so I want to know the best technique that can be used to brute force it first, so protection isn't my question. My question is: What brute ...
3
votes
1answer
111 views

Does WPS actually send passphrase?

As you know, by hacking WPS we can get the networks PSK but my question is that does WPS exactly transfers PSK when connection established? If so, Why does it need to send PSK? I mean, if the session ...
5
votes
1answer
2k views

How are shopkeepers getting the MAC address of wifi enabled smartphones?

It is clear that some big malls are tracking all the wifi-enabled mobile phones before they are connected to the network... How can this be done? I have a similar issue... how to get the MAC address ...
17
votes
7answers
2k views

Stopping ill-mannered use of guest wifi [closed]

I support a small business' tech issues including setting up a guest WiFi network. The WiFi is important since they want people sitting around and consuming their product. Over the past months they'...
5
votes
2answers
2k views

Wifi pineapple “Karma”

If a WiFi pineapple does a karma attack and a client connects to it, would you get the password (for the original WiFi) or would the client just connect to you? Is there anyway to stop it?
2
votes
1answer
2k views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
25
votes
15answers
11k views

How to block or detect user setting up their own personal wifi AP in our LAN?

Recently, I found a user plug a USB Wifi stick on his desktop, and set up an AP without password. How can we detect or block this via firewall rules or other approach?
-4
votes
2answers
106 views

What's the best way for remote desktop control (100m away)? [closed]

I have two desktop computers with one located far away from the other. I want to use remote desktop control on pc1 to watch videos from pc2. Currently I use teamviewer via LAN(wifi), but it is ...
1
vote
1answer
288 views

Was I hacked remotely, how could I find out? Windows 7

I was cleaning out my old windows 7 HP desktop computer approximately 5 months ago. There was only the expired Norton 360 as far as antivirus and no firewall. Up until this point I disabled the wifi ...
5
votes
5answers
7k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
3
votes
1answer
145 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
1
vote
1answer
2k views

How ChopChop attack against WEP actually works?

From my understanding, ChopChop attack against WEP, which goal is to decrypt one packet without need to know the WEP key, goes like this: First, the attacker takes one ciphertext message from the RF ...
2
votes
3answers
169 views

What prevents a coder from brute forcing a wifi?

I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
-1
votes
1answer
212 views

Are Apple Airport routers really more secure than other routers?

I'm asking because I just got the Airport Extreme because I read that it is one of the few routers out there that does not come with a built-in WPS switch. While this provides some comfort, does it ...
57
votes
7answers
29k views

Is there any security threat with open WiFi connection?

For a few days, my mobile device has been able to catch Wi-Fi signals that are within its radius. It's not asking for a password to use the service. So, I'm using the Wi-Fi service whenever I need to. ...
3
votes
2answers
2k views

HTTPS in captive portals and the Apple Captive Network Assistant

Suppose I connect to the Wi-Fi of a company I trust enough to give them my credit card number (say, my local airport). When I connect to their Wi-Fi network, my web browser gets redirected from any ...
2
votes
2answers
172 views

Public AP: How to reduce vulnerability window between Captive Portal and starting VPN?

I always use a VPN on my Mac when I access over public APs (such as coffee shop free WiFi) How much should I worry about the window of time where I am in the captive portal (the agreement screen) and ...
6
votes
2answers
749 views

How to Man-in-the-middle a whole network?

When performing a MiTM attack, you generally need to specify the router's IP address and the "victim" IP address. I'm trying to demonstrate to a business owner why he needs to secure his network, but ...
5
votes
2answers
154 views

Is ARP poisoning necessary?

Correct me if I'm wrong but isn't it possible to sniff WiFi traffic in the air? If so, what exactly is the point of ARP poisoning? In this scenario, the attacker would already be authenticated on the ...
1
vote
1answer
63 views

Is it feasible to use DNS query packets as a reflection tool in public WiFi environments?

It's common sense that DNS query packet can be used to establish convert channels. But in my experiment of DNS query reflection, where I send out DNS queries with spoofed source IP and MAC address to ...
0
votes
1answer
59 views

Why is there a list of known WiFi networks in my airodrop-ng output?

As you can see that in the second list -visible devices, if I am not mistaken- the top device is my main laptop, this output is from a different laptop that is, of course, not connected to any ...
1
vote
0answers
89 views

Connect to a wifi through code [closed]

Is there any way a person could write a software using for example C++ to connect to a wifi completely by using code?
44
votes
1answer
214k views

Why can you bypass restricted WiFis by adding “?.jpg” to the URL?

I recently read an article on Hacking a commercial airport WLAN. It's basically about circumventing paid airport WiFi redirections (they redirect you to a certain URL when you type something in the ...
1
vote
1answer
2k views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
0
votes
1answer
45 views

Security during data transfer

I am downloading a file from a http site on an wifi network. Is it possible(even theoretically) to change the contents of the file(or replace it with a malicious variant) during the download process?
-1
votes
1answer
249 views

WiFi Network Whitelisting?

At school we have a school-wide LAN network. It connects all the wireless devices to the internet. I've gotten the wireless pass code and have successfully connected to the network, yet I can't use ...
1
vote
1answer
103 views

Can I completely impersonate another wireless device?

I recently decided to fix up an old laptop by replacing some missing parts. I installed Kali 2.0. I also figured the most secure OS should be an OS designed for use by security professionals; ...
1
vote
2answers
43k views

WiFi WPA cracking with Reaver [closed]

This question is for anyone who has tried or succeeded to crack WiFi WPA/WPA2 keys with BackTrack Linux and Reaver. So, I wanted to test it on my WiFi router. I started everything as described here. ...
5
votes
2answers
2k views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
4
votes
1answer
246 views

Why do phones send wifi probes?

They could just listen to beacons. Why do they probe for every network you've ever connected to? Do other wireless devices do this? Does Windows, Linux esp. Kali, do this?
1
vote
3answers
225 views

Sniffing traffic on a secured wifi connection

Open wifi is a security risk since all the data can potentially be sniffed by anyone. What I want to ask is even on a secured wifi (which requires some kind of password for authentication), the data ...
0
votes
2answers
233 views

Identifying the correct SSID [duplicate]

Suppose a Wi-Fi network is present with a given SSID. Now I create a hotspot with the same SSID as that of the original network. If a user tries to connect to the Wi-Fi, which one will he connect to? ...
0
votes
1answer
74 views

Is it possible to setup a rogueAP that indicates it is encrypted with WPA2 but in fact is open?

I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP.So I uesd this command airbase-ng -...
11
votes
4answers
884 views

Wireless Activity Monitoring for PCI DSS Compliance

In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks: Is the presence of wireless access points tested for by using a wireless analyzer at ...