Security for 802.11 wireless networks.

learn more… | top users | synonyms

3
votes
2answers
973 views

What to do when GSM/Wifi is jammed and ethernet cables are cut?

So.. There are household alarm systems (to defend against burglars) which send SMS/e-mail alerts if an intruder has been detected or an alert is trigged. However, Mobile networks can be jammed, and ...
3
votes
2answers
3k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
3
votes
5answers
12k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...
3
votes
2answers
5k views

Is it practically possible to spoof a WLAN access point?

I want to try something out, but I wanted to see other opinions from you guys. What I have: WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
3
votes
2answers
2k views

OS Fingerprinting for Android

Are traditional OS-fingerprinting techniques effective in identifying Android smartphones (OS version) on a network. From my research I found most Android network mappers can be only run from Android ...
3
votes
2answers
434 views

Wi-fi security using WPA or WEP

In current years we have used WPA and WPA 2 for the encryption of data sent over an 802.11 network. But in the past WEP is used . From time to time, many people say that WEP (Wired Equivalent Privacy) ...
3
votes
1answer
352 views

Is my network affected by malware?

I am using Wi-Fi at my home, so I can connect more devices like my phone and computer in the same network. For the past two months, whatever website I visit, it loads for a long time and at the end it ...
3
votes
2answers
301 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
3
votes
3answers
4k views

Alternative to AirPcap for Linux?

I need to sniff WiFi packets, but according to AirPcap FAQ page, it just supports Microsoft Windows, not other platforms. Does any alternative of this product work in Linux? Please don't offer Alfa ...
3
votes
1answer
78 views

Does HSTS make using a public WiFi safe?

What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...
3
votes
1answer
529 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
3
votes
3answers
7k views

How to know if unauthorized users have connected to my home wifi?

I have a TP-Link wifi router. There is no screen on the front to indicate how many devices are connected to it. Is there any way to either access logs or in real-time monitor how many devices are ...
3
votes
2answers
3k views

IP cameras or webcams and wifi/network security

If I have a: router with stateful packet inspection turned on, plus WPA2 security on the wifi network an IP camera or webcam connected to this Wifi network Is there any way to ensure that: ...
3
votes
1answer
8k views

Why is a CA certificate required for EAP-TLS clients?

When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate. It's ...
3
votes
2answers
3k views

Effective wireless scanning to meet PCI DSS 11.1?

PCI-DSS section 11.2 requires the business to "Test for the presence of wireless access points and detect unauthorized wireless access points". However, this is more easily said than done. Simply ...
3
votes
2answers
922 views

What additional difficulties are present in performing ARP poisoning on a secure wireless network (WEP, WPA) vs. an insecure one?

I just finished a project in which I coded a man in the middle attack on an unsecure network. I've tried to see how feasible it would be to extend this a secured network. Some internet searching has ...
3
votes
2answers
1k views

How is WEP/WPA2 key derived?

When I was a kid, WEP had a 40 bit key. Later, they came out with a 128-bit key. But as we all know, WEP was so badly-designed that the RC4 key length didn't really matter much. Ignoring this, my ...
3
votes
2answers
387 views

How to secure a network (FTP connections) from sniffers

I'm actually working in a medium sized company with security concerns. Let me explain you my problem : The context: My office has one single internet line. This line is accessed by anyone in the ...
3
votes
1answer
10k views

House owner can see who's connected to WiFi; what more can he see?

I live in a rental house, and use the house-owner's wireless network to connect to the internet. The owner can see who is connected to his wireless network and I had a few questions regarding this ...
3
votes
2answers
885 views

Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?

I understand that there are many applications such as Snort that do the job for network layer 3 IDS. From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
3answers
613 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
1answer
54 views

Turn RPi3 Wi-Fi adapter into monitor mode using airmon-ng

For some reason, I can't turn the built-in Wi-Fi adapter on the new Raspberry Pi 3 into monitor mode like I used to do on other platforms. First I kill the processes that interfere with sudo ...
3
votes
1answer
97 views

Xfinity Wifi Risk

I recently discovered and would like to use Xfinity Wifi around town. However, it seems like a remarkably dangerous thing to do, even if you do confirm an access point's location via their ...
3
votes
2answers
664 views

If I set up a home web server, will computers that use my wi-fi be vulnerable?

I'm interested in setting up a web server on an old laptop L1. My plan is to connect that laptop to an Ethernet port on my router. I also have another laptop L2 accessing the router via wi-fi. L2 ...
3
votes
1answer
273 views

Securing my network: unmasking spoofed mac possible?

In Kali you can: airmon-ng start wlan0 ifconfig mon0 down macchanger -r mon0 (-r changes mac id to a random number) ifconfig mon0 up This attack for example: aireplay-ng -0 2 -a [ap mac #] -c ...
3
votes
3answers
4k views

How to use my WiFi to inspect its user traffic and to run MiTM attacks?

As part of a security research, I need to make my WiFi open, and to inspect the traffic of the ones who connect to it. Additionally, I need to be able to change the content of the webpages they see, ...
3
votes
2answers
2k views

Wifi security SSID clarification

I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand. Is there a best practice for SSID naming? I know that changing the ...
3
votes
1answer
537 views

WPA vulnerabilities for pentest

As I am a network&IT enthusiast, I was asked by a friend to pentest his WPA network. I'm wondering if there is anything else I can do beside a bruteforce attack, trying the KARMA attack on ...
3
votes
1answer
133 views

Is UPnP still insecure?

Here's my question: In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed? This type of question ...
3
votes
1answer
59 views

Detect a Virtual Machine on my Wifi?

Is there a way to detect whether a machine connected to my wifi is a physical machine or a virtual machine?
3
votes
2answers
1k views

HTTPS in captive portals and the Apple Captive Network Assistant

Suppose I connect to the Wi-Fi of a company I trust enough to give them my credit card number (say, my local airport). When I connect to their Wi-Fi network, my web browser gets redirected from any ...
3
votes
3answers
184 views

What previously-unknown Wifi access points will devices automatically connect to?

I was reading an article on an iOS8 SSL exploit on The Register when one quote caught my eye: “Anyone can take any router and create a Wi-Fi hotspot that forces you to connect to their network, ...
3
votes
3answers
10k views

WiFi connection history [closed]

I have a hunch someone is logging on my wifi. I already know how to see who is currently using my wifi, but can I find out who was using my wifi in the past?
3
votes
1answer
2k views

What are the weaknesses of WPA with TKIP?

I am researching about the weaknesses of WPA with TKIP. I have an idea that the AES-CCMP mode is better than TKIP, but what are the weakest points of TKIP? Also, I am wondering about the disadvantages ...
3
votes
1answer
5k views

Which part of the eapol packets contain WPA password Hash?

I have captured wifi traffic from a WPA network using Wireshark. I filtered the results for "eapol" packets and noted in the info column there are message type 3 and type 1. I believe this is two ...
3
votes
1answer
3k views

Wireless MAC Address Filtering - Authentication/Association

Can somebody explain to me how a wireless AP denies access to the network if the client does not have the correct MAC Address. Does it not send a probe response when a client has not got a correct ...
3
votes
1answer
1k views

How can I find out if someone has been on my home wifi network?

I am aware of DCHP tables, and apps that can scan your network to see who is "currently" on your wifi network, but I am more interested in how to tell if someone has been on my wifi network at some ...
3
votes
2answers
213 views

How can I tell who's using my cookie information on an open LAN?

I think someone is using my cookie info to log into my Facebook account on a public Wi-Fi network. How can I determine if this is happening and from what IP address?
3
votes
1answer
510 views

captive portal wikipedia article

Something on the wikipedia page regarding captive portals have confused me: http://en.wikipedia.org/wiki/Captive_portal When a client requests a website, DNS is queried by the browser. The ...
3
votes
1answer
61 views

Isolate Android system when connected to wifi

Is there any built-in feature or application that isolates the system when it's connected to a wlan, so that just a determined app has access to the net? For example, let's say that you want to ...
3
votes
1answer
133 views

How can I test my guest network?

I enabled my guest network and put my devices on it so my communications could be separate from the rest of my family on the main network. How can I test this to ensure the guest network really is ...
3
votes
1answer
100 views

Does WPS actually send passphrase?

As you know, by hacking WPS we can get the networks PSK but my question is that does WPS exactly transfers PSK when connection established? If so, Why does it need to send PSK? I mean, if the session ...
3
votes
1answer
146 views

How wifi sense actually connects to any network?

I read that using Wi-Fi sense, we can share our Wi-Fi networks with others and it stores pre-shared keys on Microsoft servers. Please help me understand the below scenario: I am sharing my network ...
3
votes
2answers
204 views

How can Microsoft Wi-Fi Sense share just the internet connection?

According to the Wi‑Fi Sense FAQ When you share network access, your contacts get Internet access only. For example, if you share your home Wi-Fi network, your contacts won't have access to ...
3
votes
1answer
124 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
3
votes
1answer
235 views

Why do inflight wifi networks display a captcha?

When you log on to Gogo Inflight Wifi or similar, Gogo displays a captcha: A CAPTCHA is usually associated with preventing automated traffic from accessing your network; however, to connect to Gogo ...
3
votes
2answers
143 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
3
votes
1answer
436 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
3
votes
1answer
433 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
3
votes
1answer
2k views

WiFi Direct/WPS key question

So far, I haven't seen any PoC or real-world attacks against WiFi Direct, but I see the potential because it relies on WiFi Protected Setup (WPS) for establishing the connection. Tools like Reaver ...