Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

-1
votes
0answers
20 views

Split Wireless Card For Fake Access Point? [on hold]

I'm trying to make a fake access point. Here are the steps I'm taking. How can I split my wireless card, so I have one half being the Access Point, and the other half leading to the internet. Is this ...
1
vote
1answer
66 views

How does Amazon Fire TV know my name/account? [on hold]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
2
votes
0answers
40 views

Detecting 2G/3G/4G Devices [on hold]

There are one or two answers that come close to answering this question but they either fall short or go in straight at the deeper end. Essentially, I am interested (for genuinely academic reasons!) ...
0
votes
1answer
33 views

What are the risks of file server access over wireless? [on hold]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
2
votes
1answer
87 views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
2answers
69 views

What NIC for a NUC?

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
33
votes
7answers
4k views

How would you detect an Evil Twin attack, especially in a new environment?

Let's say you are traveling, and you pause in the airport lounge, or your hotel lobby, or a nearby coffee shop. You haul out your laptop and scan the available wireless networks. You know the name of ...
0
votes
0answers
59 views

DOS attacks on 802.11 access points

I want to carry out resource exhaustion attacks on access points which would lead to DOS condition of the access point. I would like to exhaust the client association table,by imitating a large ...
1
vote
2answers
96 views

Is it possible to set up a second router with the same SSID to get the password? [duplicate]

Suppose we have an WLAN which is secured with WPA2. Its SSID is easybell123. Could an attacker who wants to get the password of easybell123 create a WLAN with the same SSID in the same area wait ...
0
votes
1answer
131 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
1
vote
0answers
47 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
0
votes
0answers
52 views

802.11w Protected Management Frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
2
votes
0answers
103 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
2
votes
3answers
121 views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
1
vote
1answer
70 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
0
votes
0answers
49 views

Why is the WLAN-Implementation so bad

If you are with your phone out of the house and you have wlan enabled. Your phone is screaming out to world i'm looking for the wlan with the name "yourhomewlanname". If someone has the router ...
0
votes
0answers
85 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
0
votes
1answer
65 views

How to stop programs like airodump-ng from seing my client's MAC ID and sending deauth packets?

I'm quite familiar on the aircrack-ng suite and I was wondering if there is a way to stop airodump-ng mon0 from seeing my client's MAC IDs? This is very sensitive information a program can get without ...
1
vote
1answer
84 views

Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?

For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
0
votes
1answer
69 views

How is PayPass/payWave secure when PIN is required after presenting the card to the contactless terminal?

The popular claim is that a chip-and-PIN payment card is more secure than a card with magnetic strip because the card data is hidden deep inside the chip and the ATM or POS terminal sends the entered ...
2
votes
3answers
137 views

promiscuous vs monitor mode in 802.11

I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here: What is the difference between Promiscuous and ...
4
votes
4answers
256 views

Bank login in foreign country

I have friends andfamily that travel/live in foreign countries and compromised unsecure wireless networks and credit card scanners have always been a problem. I was recently asked a question about ...
0
votes
1answer
53 views

WEP man in the middle

my workplace is currently using a wireless router that is secured using WEP. If I connect a laptop to the wireless router with a cable, would someone that has cracked the password still be able to ...
1
vote
0answers
64 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
0
votes
3answers
96 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
4
votes
3answers
390 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
31
votes
3answers
4k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
4
votes
2answers
917 views

Data on Malicious WiFi Network

Let's assume that I unwittingly connect to a malicious WiFi network and visit websites. By malicious, I mean the network has been set up for the purpose of stealing data. From what I've read, using ...
1
vote
0answers
53 views

Anything more i can do to be more safer? [closed]

Wi-fi security: WPS disabled WPA2-PSK + AES + 54.000 SECONDS(15h) Group Key Update Period UpnP disabled Spi firewall enable All ALG enable Ignore ping packet from WAN and Lan to router Default ...
1
vote
4answers
184 views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
1
vote
2answers
100 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
1
vote
1answer
42 views

Shielding electromagnetic wave

I tried putting mobile phone in a microwave oven and close it, putting the phone in a fridge, a cooker and close it,... every time the phone still can receive the call from other phone which means ...
2
votes
5answers
433 views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
0
votes
1answer
35 views

Mechanisms to prevent error propagation in wireless networks with respect to the avalanche effect [closed]

I was wondering what mechanisms exists that could be used to prevent error propagation in wireless networks and especially with respect to the avalanche effect. I know ARQ and FEC can be used, but ...
0
votes
1answer
52 views

Enabling wifi or bluetooth before user login in Linux

What would the security implications be of enabling and using wifi and / or bluetooth before a user logs into the system in a Linux box? Thanks for your help!
6
votes
2answers
270 views

Remediation against relay attacks (ie. NFC)

Question first: Is there any remediation for passive MITM? I've come across examples of NFC relay attacks which use phones to get around the proximity requirement for NFC payments. It looks ...
0
votes
0answers
37 views

What are European security standards in setting up a wireless ad hoc network?

I would like to know the major security standards I must follow while setting up an ad hoc wireless network in an organization situated in Europe. I am not sure about the length of my answer. If its ...
5
votes
1answer
219 views

Keyboards using 2.4GHz with AES

I got a Microsoft Sculpt keyboard, as it seems to be a small improvement over the much loved Ergo 4000. (What I'd give to have an Ergo 4000 with CheryMX Blues...) On various sites, they have this one ...
-1
votes
2answers
196 views

Can I create a fake AP with my wireless card? [closed]

I type iw list and these are the supported modes: Supported interface modes: * IBSS * managed When I run hostapd hostapd.conf I get this: Failed to create ...
13
votes
1answer
2k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
0
votes
1answer
140 views

Is (WEP) shared key authentication secure?

I've been reading up on wireless authentication and shared key authentication sounds completely bonkers. I know WEP is very insecure and breaking it with aircrack-ng takes 5-15 minutes but this sounds ...
2
votes
2answers
65 views

Is it possible to detect the type of key required when connecting to a wireless network?

So I was wondering if I could determine if a wireless network is asking for a specific type of key such as WEP/WPA ect? Or if it just takes the one you give it and processes that?
-4
votes
1answer
389 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
3
votes
2answers
107 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
2
votes
1answer
106 views

Identification info that my wireless card sends to the (wifi) network

Are any other identification information that my wireless card sends to the Wi-Fi network apart from the MAC address ? If so are they changeable? Let's say, for example, that I connect to a Wi-Fi ...
-1
votes
3answers
96 views

Can AES encryption prevent modifying bits in a wireless protocol?

I'm building an application with NFC which is a wireless communication protocol. An attacker can modify bits in a wireless communication protocol. I want to prevent this. I know we can't prevent an ...
4
votes
3answers
402 views

How does EAP/PEAP integrate with modern security protocols?

How exactly does Extensible Authentication Protocol (EAP)/Protected EAP integrate into modern security protocols? What I know (or not know) so far... It's used by wireless networks utilizing ...
2
votes
1answer
183 views

Open wireless network and OpenWRT isolation function - any risk?

What security risks would be caused by using a wireless router with no encryption for the wifi and by configuring it with: vi /etc/config/wireless option isolate 1 "HW" isolation. Running OpenWRT. ...
2
votes
1answer
646 views

Free hotspot: Open wifi vs. WPA2 wifi with known password

If we would want to give internet for free via WIFI, then what would be the better option and why from a security standpoint if we could only choose between: A non-encrypted wireless network setup ...
0
votes
1answer
154 views

Creating a secure home network - Which firm ware should I use and how should I configure my firewall?

I am starting to take on more and more enterprise clients while working remotely from my home office. I have a pretty secure network at the moment, but I have a lot hardware that I am not using and ...