Security for 802.11 wireless networks.

learn more… | top users | synonyms

0
votes
0answers
15 views

How to lock down a Guest Wi-fi?

I have a modem/router from my ISP which I'm forced to use. I would like to provide a Wifi AP for random guest that might show up at my house but I don't want to have their virus-laden PC on my network ...
1
vote
0answers
20 views

How to prevent IoT devices from phoning home via the neighbor's wifi?

I'm wondering what, if anything, can be done to thwart the sort of attack described below. First, you can assume the following: (1) There are several devices in your home which you have deliberately ...
2
votes
1answer
25 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a ...
0
votes
1answer
54 views

Harassing Spoofed Text [on hold]

I have been receiving very harassing texts over the past few days. Though they won't tell me who they are, and they are using some kind of wifi text app, or random number generator that makes the ...
4
votes
3answers
15k views

Is it possible to create a custom login page for your own Wi-Fi hotspot?

How do I create my own open Wi-Fi hotspot/access point with a custom login page similar to those found in commercial hot-spots? The page would be accessible using Windows or iOS, and users would have ...
-2
votes
1answer
50 views

Sniffing or DOS attacks or MIM Attack [on hold]

i'm preparing my bachelor's degree, i have to chose an attack, sniffing, dos, or MIM attack, I'm a bit lost, in my project i have to find a solution, how to detect one of this attacks, If you guys may ...
-1
votes
2answers
67 views

History of connected devices to my internet router (WIFI) [closed]

Note: same question here, however I was not able to comment because it was by an unregistered user account. Simply, how can I know who (devices) has connected to my network WiFi without using tools ...
-1
votes
0answers
25 views

History (logs) of connected devices to my internet router (WIFI) [duplicate]

Simply, how can i know who has connected to my network WIFI? without using tools that run on PCs to monitor the traffic. Is there is a way?
0
votes
1answer
45 views

airodump-ng mon0 device

My laptop is in monitoring mode. I need to get the details of a client that makes probes and not include other bssid and their station. I run sudo airodump-ng -w s3 --bssid 74:de:2b:45:ed:d4 mon0 ...
16
votes
8answers
49k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like whatsapp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
1
vote
1answer
105 views

Network Security with EAP: PEAP and Phase 2: MSCHAPv2?

I want to connect to my college WiFi but I’m worried about the security (data leakage, hacks, MITM). The configuration I used to connect to my college WiFi is as follows, EAP: PEAP Phase 2: MSCHAPv2 ...
0
votes
0answers
28 views

Changing the SSID of the fake AP created by linset

As per the title I described above, I know that linset basically created a fake AP for the victim to connect then steal their Wi-Fi password or any other credentials. What I want to know is how do we ...
0
votes
2answers
1k views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
6
votes
1answer
156 views

How does WifiKill work?

How is possible for Wifi Kill to block someone from using Wi-Fi, even if you don't have access to the router settings and you even don't use MITM (I think)?
0
votes
1answer
41 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
2
votes
1answer
48 views

Does HSTS make using a public WiFi safe?

What attacks, if any, are possible if I connect to a public WiFi network and only use my computer to access a previously-visited site that uses HSTS. I believe that attacks such as SSLstrip are not ...
4
votes
6answers
245 views

How to choose a good (and easy to use) WiFi password?

Over the last few months I have had to enter WiFi passwords into smart phones, TVs, printers, etc. None of these have real keyboard and they make it hard to enter long passwords or passwords that ...
1
vote
1answer
36 views

How do I associate an SSID to a device?

In other words I am referring to the wlan.fc.type_subtype==0x04 filter in Wireshark while using a WiFi adapter in monitor mode. How can I associate an SSID to an Android device (for example) if that ...
-2
votes
1answer
30 views

Router connected to my ethernet [duplicate]

I'm guessing that someone is bringing his router to provide wifi to his coworkers, by connecting it to a certain point on one of the 8 floors of my building, how can I know where is connected?
2
votes
1answer
2k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? Where would one get said tables or can they be ...
3
votes
1answer
51 views

Xfinity Wifi Risk

I recently discovered and would like to use Xfinity Wifi around town. However, it seems like a remarkably dangerous thing to do, even if you do confirm an access point's location via their ...
4
votes
1answer
144 views

How wifi sense actually connects to any network?

I read that using Wi-Fi sense, we can share our Wi-Fi networks with others and it stores pre-shared keys on Microsoft servers. Please help me understand the below scenario: I am sharing my network ...
3
votes
3answers
474 views

Sniffing the sniffer

A sniffs B while B is sniffing C. What's the traffic in A? Does A catches both B and C traffic or only B's?
15
votes
3answers
6k views

Can an attacker sniff Mac addresses on a wifi?

If an attacker turns on wifi but doesn't have the security key to connect to an access point in range, can he still sniff packets that travel between the access point and clients connected to the ...
7
votes
5answers
3k views

What are potential security risks when using an insecure wireless connection?

If someone is using an insecure wireless connection (for example a hot spot in a coffee shop) does it pose a threat even if the person is using a secure application layer protocol? What I mean by ...
0
votes
2answers
91 views

Is the typical hotel wifi authentication insecure? [duplicate]

I saw many hotels use unencrypted wifi and then expect you to type in a wifi password over HTTPS. All HTTPS website requests are captured, and you get an "untrusted certificate" warning and HTTP ...
12
votes
3answers
192 views

Did someone impersonate my WiFi?

TL;DR: An unknown WiFi extender showed up in my DHCP logs and my phone routinely connected through that access point. How badly was my network or traffic at risk? This morning, while struggling ...
1
vote
1answer
40 views

How can systems recognize different wifi AP with the same SSID and MAC address

I'm testing, for studying purpose, an evil twin attack. In my scenario I have both the rogue AP made by my laptop and the real AP with the same SSID and MAC address, but with different security ...
1
vote
1answer
55 views

Opensource firmware for WiFi router

I have two routers from D-link which are DIR615 and 2750U. Both of the firmware are upgraded to latest versions. They don't have bandwidth control. Found there are lots of opensource firmware ...
1
vote
2answers
240 views

Security risk of connecting one mobile device to another mobile device's hotspot

Is there any risk when connecting an Android Phone to a [Verizon] iPhone's Hotspot? If there are I'd like to know about solutions. The Android Phone will basically be tapping the data plan of the ...
-2
votes
1answer
51 views

Is my iPhone 6S Plus compromised? [closed]

Is it usual practice on an iPhone 6S Plus for the wifi and Bluetooth addresses to be identical except for the very last number? One ends in .44 and the other .45. I've also had a lot of weird things ...
3
votes
1answer
54 views

Detect a Virtual Machine on my Wifi?

Is there a way to detect whether a machine connected to my wifi is a physical machine or a virtual machine?
0
votes
1answer
82 views

How to secure wireless (Wi-Fi) home network [closed]

What are the countermeasures to make home wireless network secure, which will both prevent others from stealing internet and will also prevent hackers from taking control of computers through your own ...
1
vote
0answers
31 views

3G/4G device that's less likely to be backdoored [closed]

I can't use wifi at the moment so my only option is some sort of cellular connection (either through USB modem or mifi hotspot). I have been looking at devices but most seem to be Chinese companies ...
4
votes
1answer
92 views

Is it good idea to use a access point MAC address as wifi password?

I realized that one network I'm connecting with is using a MAC address of one of its interfaces. If an attacker would know that fact, could he somehow obtain the MAC address wirelessly and break ...
0
votes
3answers
80 views

Can WiFi detect you even if you aren't connected

I've read that the way WiFi works is that your computer sends out requests looking for any WiFi it recognizes. I use a MAC spoofer but if there is a WiFi in range before I have time to spoof my MAC ...
1
vote
1answer
81 views

Using dnscrypt on a public hotspot with a captive portal

What strategy shall I take if I wanted to use a dnscrypt with a public hotspot that requires login through a captive portal? Such hotspots require DNS settings to point to their servers (via DHCP) so ...
2
votes
1answer
62 views

How do I create a secure public wireless network? [closed]

How do I design a secure public wireless network. I want to offer guest network. But how do I make it secure without making my customer get authenticated with password or username. I have read about ...
24
votes
9answers
3k views

What are the security implications if someone got my home WiFi network password?

I gave my WiFi password to a guest. I'm wondering how can he exploit this opportunity? Like, can he access my other devices localhost servers? Can he brute force to get the password of the router to ...
4
votes
1answer
79 views

How unique should I make my SSID?

Some say that a 32-character random string is a good idea for SSID names: Treat your WiFi network name as you would a password. Make it complex and avoid using any whole words. Maximum length for ...
7
votes
1answer
87 views

Do cellphones periodically send a “hello” msg to nearby WiFi APs?

I recently stumbled on this site, offering cell phone detection solutions: http://www.libelium.com/products/meshlium/smartphone-detection/ Where they state that: Users have to do nothing to be ...
4
votes
3answers
466 views

Secure way to grant access to WIFI network based on dynamic parameters?

I am looking for a way to grant access to a secured WiFi network, based on certain external information? For example, some server on the internet could store MAC addresses that ought to be granted ...
3
votes
0answers
27 views

Reaver stuck at flow_handler

I tried to run Reaver against my router at home using an Ubuntu 15.10 laptop. The command used was: sudo reaver -i mon0 -b XX:XX:XX:XX:XX:XX -vv -c 7 -a (the channel I got from aerodump-ng). I'm ...
6
votes
2answers
608 views

Discovering IP or Mac address of mobile devices passing by.

Is it possible for someone to discover the IP and/or MAC address of my mobile device, even if I do not attempt to connect to their network?
1
vote
1answer
90 views

Can network admin detect an MiTM attack?

I am on a WiFi network with a SonicWall router (I'm guessing this comes with an IDS). If someone on my network launches an MiTM attack on me, will the network admin be able to detect this? Does an ...
4
votes
1answer
202 views

How does Karma's open WiFi network successfully protect its users?

Foreword This question has a lot of build-up, so please scroll down to the bottom if you just want to see the question. Please at least skim the background info, though. Background I ordered a ...
7
votes
1answer
72 views

Preventing evil twin WiFi attacks on embedded systems

I've recently been looking at a few of the low-end WiFi modules used in IoT devices, such as the TLGUA06 and ESP2866. As expected, it's possible to deauthenticate these devices by sending a ...
0
votes
0answers
72 views

Generate password list with specific keywords and length

I need to generate a list of passwords to try penetrating into a wi-fi network. I have a pretty big list of keywords and I want to use them to generate as many possible passwords as possible, which ...
4
votes
1answer
395 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
4
votes
0answers
168 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...