Security for 802.11 wireless networks.

learn more… | top users | synonyms

0
votes
1answer
22 views

WEP password cracking

I was testing WEP password cracking on my router. I had set a thirteen character password ("TESTING123456") and tried these commands: airmon-ng start wlan0 Then i started airodump-ng using this ...
1
vote
1answer
18 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
1
vote
0answers
58 views

Knowing the MAC adress of a stolen laptop [migrated]

Recently my HP 1000 laptop was stolen, is there any way to find its MAC address? I connected my laptop to a PTCL EVO (Pakistan) WiFi USB dongle, but in the device options there is nothing I could ...
1
vote
1answer
27 views

Padding of 802.11 packet with 0's in libpcap

I am trying to send probe request to Access Points.But whenever I send a probe request packet it is padded with 0's i.e I see two packets on wireshark for every packet I send : a non-padded packet and ...
3
votes
2answers
460 views

How to know if I'm under a MITM attack

If I am connected in a public WiFi, is there any way to know whether I am under attack or not while browsing sites using SSL? For example, if I visit facebook.com and the URL starts with "https://", ...
1
vote
1answer
28 views

Can Hydra and Crunch be used in combination for HTTP-get-form? [on hold]

I'm trying to recover my router username and password without resetting the router for educational purposes. I read that Hydra can be used for "brute-forcing" http-get-form authentication that most ...
0
votes
1answer
137 views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
1
vote
0answers
76 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
2
votes
0answers
32 views

If I install a certificate for the purposes of logging into a Wifi connection, is it still safe?

There are some wifi networks (large universities for example) which use HTTPS to get to a login page, and in order to verify that they have not been spoofed, provide the certificate ahead of time ...
1
vote
0answers
34 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
2
votes
5answers
12k views

WiFi deauth attack - Difference between Aireplay and MDK3

I am currently working on some WiFi related security issues, and something appeared to me. I have an Open WiFi network, to which a client connects. I try the Deauth attack from Aireplay ...
0
votes
0answers
24 views

How to get handshake? [on hold]

I'm hacking WPA Wifi, and I'm crack one, but second Wifi dose't have handshake, I think that is because that Wifi don't have connected devices to it. Do exist alternative to get handshake?
4
votes
3answers
4k views

WiFi connection history [on hold]

I have a hunch someone is logging on my wifi. I already know how to see who is currently using my wifi, but can I find out who was using my wifi in the past?
0
votes
0answers
40 views

Sniffing wireless LAN network using tcpdump [migrated]

If I correctly understood the basics of the wireless working, I should be able to sniff the traffic of other computers over the wireless LAN. So I connected a second computer to my wireless LAN and ...
1
vote
1answer
107 views

Can my identity be revealed through WiFi access?

Assuming I am using a WiFi connection on my Android phone, can somebody also on the network know the particular sites I visit? I believe they will get to know my MAC ID, but will they get to know ...
22
votes
2answers
9k views

How is wireless WiFi password cracked?

Let's say I have a wireless network that is password protected. What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
0
votes
2answers
210 views

Do WiFi passwords remain accessible significantly after logging in?

"... they'll go to the taskbar and look at the properties of the WiFi router to get the password." is a quote from another question on this site, and is in the context of WiFi passwords. The ...
-1
votes
3answers
52 views

Does using reaver crash or bring down a network

Does using Reaver crash or bring down a network? I've googled this and haven't turned up anything. I mean like a home router.
2
votes
5answers
72 views

Reasons for gathering MAC address list

Suppose there is a password-secured WiFi network that exists to provide users with Internet access only. Edit: Consider a guest/mobile-BYOD network as an example. Since filtering access to a WiFi ...
3
votes
1answer
257 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
68
votes
16answers
12k views

Trying to keep high school students out of the Wi-Fi network

I'm a teacher and IT person at a small K-12 school. The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
3
votes
6answers
2k views

If I am not logged into my company's WIFI, can they view my information? Or am I transmitting?

I was at work using my phone. We have an open WIFI, but I did not use it to go online. I was wondering, can my information be viewed or was I transmitting data even though my phone said I was not ...
0
votes
2answers
101 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
1
vote
1answer
56 views

HTTPS in captive portals and the Apple Captive Network Assistant

Suppose I connect to the Wi-Fi of a company I trust enough to give them my credit card number (say, my local airport). When I connect to their Wi-Fi network, my web browser gets redirected from any ...
0
votes
0answers
21 views

Capturing beacon frames in 802.11 [migrated]

How can I capture 802.11 beacon frames on my linux machine using a C program.Also how can I send a frame response using a C program?
1
vote
2answers
153 views

Internet monitoring and DNS encryption

If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing? Also, if that person uses HTTPS 100% of the ...
4
votes
2answers
61 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
0
votes
0answers
22 views

Problem creating evil twin using airbase-ng [migrated]

I am trying to create an evil twin access point using airbase-ng.I am creating a hotspot using my mobile and connecting anther mobile to this hotspot.Now I am trying to create an evil twin access ...
1
vote
1answer
149 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
-1
votes
1answer
92 views

Can other people monitor my internet activity in the same WiFi network? [duplicate]

I have a tablet that I share the same WiFi with two other people/computers. I have installed the CM Security anti virus app, and also a cleaning app. I think that my activities are being monitored by ...
-3
votes
0answers
46 views

wifi router compromised

sorry for the vague question: When my brother came to visit, he connected his phone to my wifi network. For some reason, connecting to the wifi continued to work, but the internet connection from ...
1
vote
3answers
69 views

Risks associated with HTTP content injection?

I'm curious about the risks associated with HTTP content injection, where an ISP injects content to pages accessed over non HTTPS connections. Some examples: ...
-1
votes
4answers
310 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
7
votes
4answers
1k views

Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?

So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
1
vote
2answers
134 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
6
votes
7answers
14k views

Is a longer WiFi password more secure?

Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
0
votes
0answers
39 views

Wifi Pineapple :Modifying white list by client

If wifi pineapple maintains a whitelist with specific ssid's, then it responds to only those ssid probes.Is there any method or tools by which I can access/modify/interact with wifi pineapple's white ...
14
votes
8answers
4k views

Can an employer see what I'm doing on my iPhone whilst logged onto wifi

I log on to my works wifi throughout the the day whilst at work, I use apps like whatsapp and iMessages to communicate when I need to, can my employer see the content of those messages (actually read ...
39
votes
7answers
8k views

Why isn't open WiFi encrypted?

As far as I understand, WiFi networks that require no password send traffic through the air unencrypted. Those that require a password encrypt each connection uniquely, even if they're all using the ...
5
votes
1answer
1k views

ARP-poisoning on wireless network - no packets

I've started working with ettercap and ARP-poisoning; however, I've sumbled upon some problems. I've executed the following command: ettercap -i wlan0 -w log -T -M arp:remote /192.168.1.254/ ...
4
votes
2answers
965 views

Does a TMSI change often enough to prevent tracking?

A company called Path Intelligence has a product called Footpath which uses the TMSI, WiFi MAC address, and bluetooth MAC address to track phones as they move through stores. However, I don't see ...
44
votes
9answers
20k views

Is visiting HTTPS websites on a public hotspot secure?

It's often said that HTTPS SSL/TLS connections are encrypted and said to be secure because the communication between the server and me is encrypted (also provides server authentication) so if someone ...
2
votes
1answer
133 views

How are Captive Wifi Portals secured?

I'm looking for a captive portal solution that prevents other users from stealing the session key from other active users. (or prevents the cloning the authenticated user's MAC) Is there a reliable ...
0
votes
2answers
87 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
9
votes
5answers
613 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
2
votes
2answers
35k views

WiFi WPA cracking with Reaver

This question is for anyone who has tried or succeeded to crack WiFi WPA/WPA2 keys with BackTrack Linux and Reaver. So, I wanted to test it on my WiFi router. I started everything as described here. ...
1
vote
3answers
96 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
1
vote
1answer
481 views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
3
votes
1answer
75 views

Why do inflight wifi networks display a captcha?

When you log on to Gogo Inflight Wifi or similar, Gogo displays a captcha: A CAPTCHA is usually associated with preventing automated traffic from accessing your network; however, to connect to Gogo ...