Security for 802.11 wireless networks.

learn more… | top users | synonyms

22
votes
9answers
2k views

How can I ensure that I connect to the right wireless Access Point?

Under Windows/Linux, client side. How can I ensure that I'm not connecting to a rogue AP?
6
votes
3answers
738 views

wlan security - why is it not possible to protect against deauthentication flooding

Wireless security (Wikipedia) describes security issues due to the fact that wi-fi deauthentication packets are unencrypted: Weak PSK passphrases can be broken using off-line dictionary attacks by ...
0
votes
2answers
229 views

How to find out the Chaff packets of WEP?

I have a cap file in which I have lots of 802.11 packets encrypted with WEP key. The problem is lots of Chaff packets of WEP is included in that. I want to remove the Chaff packets and crack the key. ...
6
votes
2answers
8k views

The new CCMP attack against WPA/WPA2 PSK

The use of Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for WPA/WPA2 PSK is being attacked. This is a trivial attack (offline brute force) against the initial ...
6
votes
2answers
3k views

Wireless hardware with limited range?

I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity? Several sources have recommended WPA2, but I'd still ...
2
votes
1answer
621 views

Comprehensive book to study about wireless technology

I am searching for a comprehensive book on wireless technology that covers in detail almost everything about wireless technology, including the related protocols, security, hacks, etc. I know it is ...
2
votes
2answers
7k views

aircrack-ng under Win7 — possible?

What needs to be installed to get the full aircrack-ng suite (or the closest possible equivalent) working under Win7? Should you use VirtualPC, VirtualBox, or VMware Workstation for this? Should you ...
6
votes
1answer
886 views

Linux wireless hacking book

I am looking for recommendations on a good wireless hacking book. I would like something more focused towards the defensive, but a healthy knowledge of both would be great. I would also need it to go ...
4
votes
2answers
1k views

Giskismet query, how to select specific data?

I’m basically trying to get some stats from my war drive kismet database using giskismet but I’m finding it difficult to get specific data. Things I'm trying to do: Count how many wireless BSSID’s ...
6
votes
1answer
160 views

Wireless auto-join on laptops

Maybe I have the wrong idea but this is a question that has been floating in my head for some time. Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
7
votes
2answers
11k views

In inSSIDer, what is the difference between WPA2-CCMP and RSNA-CCMP?

inSSIDer shows my wireless network as RSNA-CCMP. The settings on the wireless router (Linksys E2000) do not at all seem to suggest an "RSNA" security option. The security filtering options in ...
11
votes
1answer
4k views

Is WPA2 WiFi protected against ARP poisoning and sniffing?

Is WPA2 WiFi protected against ARP poisoning? If not, can the ARP poisoner decrypt the packets?
23
votes
5answers
3k views

Security impact of using a public password for free WiFi

We have a WiFi network that we want to be public and free. Does having a password that is known to everyone provide any additional security advantage to the people using this network as opposed to ...
1
vote
1answer
292 views

Wireless Access Point security with TEW-638APB

We have a large network that is private, with both eithernet and Wifi access. We'd like to make another smaller network that is wireless, open, and possibly throttled, and not able to access our ...
2
votes
3answers
6k views

intel wireless 5100 AGN adapter to support injection

i ran aireplay-ng -9 wlan0 and it seems that my intel PRO/Wireless 5100 AGN adapter does not support injection. i use Ubuntu 10.10 64bit (2.6.35-25-generic kernel). is it possible to make the adapter ...
8
votes
2answers
1k views

What security risks do unauthorized mobile hotspot (MiFi) devices on company proprerty pose?

I'm having some difficulty determining how, or if, MiFi devices on property should be regulated. Personally, I see them as having little difference from any other rogue AP in the environment - the ...
8
votes
6answers
527 views

Doing a demo about open wireless networks exploiting with Firesheep

A collegue and I have been asked to do a demo where we show off stealing Facebook sessions with Firesheep. I've never used Firesheep before myself, but I reckon it should be a simple task. I know the ...
4
votes
4answers
558 views

What particular concerns should one bear in mind when wardriving?

I'm considering starting a neighborhood-wide wardrive, with the objective of raising awareness to the risks of running unsecured wireless networks. Right now, I'm still in the planning stages of this ...
23
votes
4answers
9k views

Are MAC Address Filtering and SSID Hiding still worthwhile?

On a recent certification exam, I was presented with a question about ways to secure an 802.11 wireless network. It was a multiple-answer question, but the only two available answers that related at ...
13
votes
5answers
2k views

Access to a router's GUI

During a recent visit to a coffee shop, I noticed that they hadn't bothered changing their default user name and password for their router. I realise that someone could log on and be annoying to ...
41
votes
9answers
17k views

Is visiting HTTPS websites on a public hotspot secure?

It's often said that HTTPS SSL/TLS connections are encrypted and said to be secure because the communication between the server and me is encrypted (also provides server authentication) so if someone ...
22
votes
6answers
1k views

How to secure a WiFi network?

What do I have to do to secure a WiFi network? Is there any best practices? I have been recommended to use WPA2 encryption on the router, is that enough? What can I do to improve the security even ...
12
votes
4answers
687 views

Wireless Activity Monitoring for PCI DSS Compliance

In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks Is the presence of wireless access points tested for by using a wireless analyzer at ...