Security for 802.11 wireless networks.

learn more… | top users | synonyms

2
votes
0answers
34 views

How to Man-in-the-middle a whole network?

When performing a MiTM attack, you generally need to specify the router's IP address and the "victim" IP address. I'm trying to demonstrate to a business owner why he needs to secure his network, but ...
1
vote
1answer
219 views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? Where would one get said tables or can they be ...
1
vote
1answer
33 views

Protection of eduroam credentials

Recently my educational institution officially switched over from the their own wireless network to eduroam. If I understand correctly from the FAQ, credential authentication is performed on the ...
2
votes
1answer
56 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
-3
votes
0answers
29 views

Restarting a wifi router with too many connections at the same time? [on hold]

Will router restart itself if receives too many connections at the same time, i.e. 200 connections. Will a enough big number of simultaneous connections bring the router down? Will this work? I ...
3
votes
1answer
58 views

How wifi sense actually connects to any network?

I read that using Wi-Fi sense, we can share our Wi-Fi networks with others and it stores pre-shared keys on Microsoft servers. Please help me understand the below scenario: I am sharing my network ...
1
vote
1answer
272 views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
-1
votes
0answers
30 views

WPA explained for the non-technical?

Can anybody give me a simple explanation of the WPA mechanism used in our WiFi routers? How does my device know that it's connecting with the router I want to connect to (i.e. no man in the middle ...
5
votes
2answers
10k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
0
votes
0answers
15 views

2 IP cameras with same configuration but different behaviour [migrated]

I have a Vodafone Station router, and 2 IP cameras connected to it through an Ethernet cable. Both have the same configuration. Both DHCP enabled, one has IP 192.168.1.10 with port 81 and the other ...
25
votes
4answers
11k views

Are MAC Address Filtering and SSID Hiding still worthwhile?

On a recent certification exam, I was presented with a question about ways to secure an 802.11 wireless network. It was a multiple-answer question, but the only two available answers that related at ...
1
vote
1answer
37 views

Security during data transfer

I am downloading a file from a http site on an wifi network. Is it possible(even theoretically) to change the contents of the file(or replace it with a malicious variant) during the download process? ...
-2
votes
0answers
57 views

Is it possible for hackers hack my PC [closed]

Please help I don't know those MAC addresses, and when I [lock to folder shared] I see all my information shared without my permission.
1
vote
1answer
46 views

WiFi Network Whitelisting?

At school we have a school-wide LAN network. It connects all the wireless devices to the internet. I've gotten the wireless pass code and have successfully connected to the network, yet I can't use ...
2
votes
1answer
82 views

Can I completely impersonate another wireless device?

I recently decided to fix up an old laptop by replacing some missing parts. I installed Kali 2.0. I also figured the most secure OS should be an OS designed for use by security professionals; ...
4
votes
5answers
4k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
1
vote
2answers
36k views

WiFi WPA cracking with Reaver [closed]

This question is for anyone who has tried or succeeded to crack WiFi WPA/WPA2 keys with BackTrack Linux and Reaver. So, I wanted to test it on my WiFi router. I started everything as described here. ...
-1
votes
0answers
41 views

What are some common attacks to hack all nodes on a LAN? [closed]

Imagine there is a room with 20 different computers, all connected with one router. What are some common attacks that hackers could perform while sitting on one computer to hack the others?
3
votes
1answer
292 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
5
votes
2answers
383 views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
4
votes
1answer
99 views

Why do phones send wifi probes?

They could just listen to beacons. Why do they probe for every network you've ever connected to? Do other wireless devices do this? Does Windows, Linux esp. Kali, do this?
1
vote
3answers
66 views

Sniffing traffic on a secured wifi connection

Open wifi is a security risk since all the data can potentially be sniffed by anyone. What I want to ask is even on a secured wifi (which requires some kind of password for authentication), the data ...
0
votes
2answers
173 views

Identifying the correct SSID [duplicate]

Suppose a Wi-Fi network is present with a given SSID. Now I create a hotspot with the same SSID as that of the original network. If a user tries to connect to the Wi-Fi, which one will he connect to? ...
2
votes
1answer
135 views

HTTPS in captive portals and the Apple Captive Network Assistant

Suppose I connect to the Wi-Fi of a company I trust enough to give them my credit card number (say, my local airport). When I connect to their Wi-Fi network, my web browser gets redirected from any ...
-3
votes
0answers
41 views

Process to setup a wifi with OTP [duplicate]

I am in a process to deploy WiFi in an cafe outlet. Does anyone know how can we setup an OTP on the WiFi where a user / customer tries to use WiFi of the cafe, he / she will need to enter OTP he will ...
0
votes
1answer
60 views

Is it possible to setup a rogueAP that indicates it is encrypted with WPA2 but in fact is open?

I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP.So I uesd this command airbase-ng ...
12
votes
4answers
791 views

Wireless Activity Monitoring for PCI DSS Compliance

In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks: Is the presence of wireless access points tested for by using a wireless analyzer at ...
-1
votes
0answers
5 views

multiple BSSIDs with aireplay-ng [migrated]

Is it possible to use aireplay-ng to send deauthentication packets as if they were from many different BSSIDs? ex: root@kali:~# aireplay-ng --deauth 0 -a <BSSID1, BSSID2, BSSID3, ...> mon0
-1
votes
1answer
54 views

How does my internet look over a public wifi connection? [duplicate]

I am curious. I use VPN over a public wifi. How does my internet traffic look as it is being transmitted over the public wifi connection? Can anyone intercept and determine what websites I visit? ...
1
vote
1answer
61 views

Public AP: How to reduce vulnerability window between Captive Portal and starting VPN?

I always use a VPN on my Mac when I access over public APs (such as coffee shop free WiFi) How much should I worry about the window of time where I am in the captive portal (the agreement screen) and ...
1
vote
1answer
161 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
-1
votes
0answers
31 views

Is it possible to phish a wifi password using a fake AP? [duplicate]

If I were to create a fake AP with password and give it an SSID like the real AP using a program like hostapd,then when clients connect to this fake AP , they will type the real password and send it ...
0
votes
0answers
26 views

Open WiFi Network Where All Confidential Communication is Encrypted Through Other Means

Imagine the following scenario: Users connect to an open WiFi network (no password, no encryption) All users stick to secure transmission protocols for all confidential data (HTTPS, SSH, VPN, etc.) ...
2
votes
1answer
121 views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
0
votes
0answers
88 views

Wifi Card Removed, computer still shows data packets sent/received [migrated]

I have purposely removed the wifi card on my macbook in order to work offline securely. The "Activity Monitor" still shows packets are being sent/received. How is this possible? Of particular ...
2
votes
0answers
41 views

WiFi Fingerprinting RFC2617 Linux Device Cannot Unauthenticate Unless AP Password Changes

There is a Cisco WiFi Access Point in the office that is intended for guests. It is an open network in that you can associate without providing a password with the SSID. It supports RFC2617 and so the ...
4
votes
2answers
173 views

How can Microsoft Wi-Fi Sense share just the internet connection?

According to the Wi‑Fi Sense FAQ When you share network access, your contacts get Internet access only. For example, if you share your home Wi-Fi network, your contacts won't have access to ...
0
votes
1answer
54 views

Can the Belkin WeMo switch be attacked without the attacker knowing my WiFi password?

The Belkin WeMo switch lets you turn on and off electric sockets over WiFi using an app. Apart from the WiFi password, is there another potential vulnerability of this device that could let an ...
7
votes
1answer
378 views

How to protect a Wifi network from Microsoft WiFi Sense

Microsoft is deploying a new feature, WiFi Sense, which provides users a way to easily share passwords to wireless networks with all of their contacts. This introduces a new security failure mode: a ...
8
votes
2answers
462 views

Privacy of my company's guest Wi-Fi [duplicate]

I use my company's guest Wi-Fi along with another maybe 1500 other people across our site. On my breaks I access some random chat servers. Can my company see and hear my conversation?
0
votes
0answers
59 views

How secure is the TAP Windows Adapter V9? [duplicate]

I use Cyberghost to browse the web on public wifi. How secure is the network adapter? Cyberghost uses OpenVPN which utilizes TAP Windows Adapter V9. I am asking this, because I believe at the ...
1
vote
3answers
287 views

Is there a tool in Kali Linux that get Wi-Fi passwords only by capturing the traffic? [closed]

Tools in Kali Linux generally crack Wi-Fi password by injecting packets. Is there a tool that can crack or get the password only by capturing the traffic?
0
votes
1answer
131 views

How dangerous is checking email on open Wi-Fi network

How risky is it to check my email on my smartphone on an open Wi-Fi network (i.e. Starbucks or Old Navy)? Is this only risky if someone is snooping? Do they have to be there, or can they leave a ...
2
votes
2answers
204 views

If password is super long, your wpa / wpa2-psk is safe?

sorry im kinda clueless with this stuff... I heard if you set your wifi password to more than 10 or so digits (and make it complicated), then your wpa / wpa2 psk would be safe. Is that true? If not, ...
0
votes
0answers
51 views

How to monitor websites being visited on network? [duplicate]

I want to monitor the websites that are being visited on my wifi network by the different IPs connected to the network. Is there a way to do this, other than Wireshark?
0
votes
5answers
122 views

Monitor websites being visited on network

I need to monitor the websites being visited on my wifi network by the different IPs connected to the network. What is the best way to do this? I spent some time with Wireshark but I feel it is a bit ...
1
vote
1answer
32 views

aireplay-ng is unable to send de-authentication packet [closed]

I executed the following commands to check the password security of my wifi with WPA2 in kali linux (in root) airomon-ng airomon-ng start ...
21
votes
8answers
5k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
38
votes
1answer
191k views

Why can you bypass restricted WiFis by adding “?.jpg” to the URL?

I recently read an article on Hacking a commercial airport WLAN. It's basically about circumventing paid airport WiFi redirections (they redirect you to a certain URL when you type something in the ...
8
votes
1answer
1k views

Does restricting the names of computers allowed to connect to a wifi network provide any security

In response to a statement elsewhere that MAC address filtering was essentially useless for protecting a wifi network because it was trivially by passable by network attack tools, I was asked if the ...