Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

1
vote
0answers
22 views

Nexus 7: Can I set its WiFi to monitor/promiscous mode? If so, how? [migrated]

Related question: Nexus 7 (Or any other good android tablets) For pen testing Also asked on: the android forums (no success so far): Nexus 7: Can I set its WiFi to monitor/promiscous mode? If so, ...
9
votes
1answer
623 views

Are networks using EAP-TLS affected by Heartbleed?

Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
0
votes
1answer
82 views

Why are cryptographic algorithms implemented in the data-link layer in wireless networks?

Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
-1
votes
1answer
41 views

If there is no handshake, then it is worthless to check for passwords?

# aircrack-ng output-01.cap Opening output-01.cap Read 31484 packets. # BSSID ESSID Encryption 1 00:11:22:33:44:55 SSIDHERE WPA (0 ...
-2
votes
0answers
20 views

How to check for 4way handshake in ivs files? [migrated]

There are many tutorials how to search in pcap files for the 4way handshake in wireshark (search for the "eapol"). Q: But how can I search for these in .ivs files? Or ivs files doesn't contain ...
1
vote
0answers
46 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
11
votes
2answers
1k views

Why does Evil twin works?

https://en.wikipedia.org/wiki/Evil_twin_%28wireless_networks%29 My question: it's OK that someone can make an AP with the same MAC and SSID as the original AP. And with stronger signal. But what I ...
1
vote
1answer
357 views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
4
votes
2answers
97 views

Should I set different passwords for different Wi-Fi bands?

My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them. Now, since cracking just one of the two means that the attacker would ...
1
vote
2answers
43 views

Criteria for an ADSL wireless modem

I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what are the criteria I should consider, and which security features should I look for? How should I compare ...
1
vote
1answer
120 views

Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?

I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities. What I am really unable to realize is why it ...
1
vote
0answers
86 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
2
votes
1answer
112 views

Does Windows 7 have built in wifi deauthentication attack protection?

I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be? I've got ...
1
vote
0answers
110 views

Whole system ACK flood attack making internet slow

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
0
votes
3answers
85 views

Do i need to have Airpcap?

Hi I am learning system security in an online course, in a practical experiment I tried to monitor the traffic through my router using wireshark1.10.3 but i have a feeling that it only sensing traffic ...
1
vote
1answer
74 views

Locate rogue wireless access point using Kismet data

Is there any way how to use Kismet data to locate rogue wireless access points?
2
votes
2answers
115 views

Wireless Positioning System (WPS) works without Internet?

As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
1
vote
1answer
77 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
0
votes
1answer
103 views

Security of Moblie Hotspot (4G LTE, WiFi) vs. Apartment Complex Cable Internet

The overwhelming majority of my banking is done online. As such, I try to be as cautious as possible. I am moving into a new apartment in a few months which offers internet. (I am not sure whether it ...
2
votes
2answers
93 views

Are there any known attacks for a laptop with the wifi connection turned off?

I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
1
vote
3answers
132 views

Protecting wireless network

My wireless network protected under WPA-PSK/WPA2-PSK protocol. Is there a good reason to change the default user/password for the router management interface? What would it take for an hacker to ...
1
vote
1answer
44 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
0answers
38 views

Scapy capturing Dot11 headers windows

Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
1
vote
2answers
627 views

Getting access to MAC address of access point from a device wired to the network

My home network consists of a router (with wired and wireless connections), and a separate access point used to repeat the router wireless signal. A device is further wired to the access point; it ...
2
votes
0answers
47 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
1
vote
5answers
176 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
2
votes
0answers
103 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
3
votes
2answers
489 views

How do I securely separate a wireless subnet from the wired network?

My setup looks like this: In the interest of security, I'd like to separate the wired network (where the Workstation is plugged in) from the wireless subnet. I don't trust some of the devices in ...
3
votes
4answers
430 views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
0
votes
1answer
89 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
1answer
47 views

Is MS-CHAPv2 incompatible with securely stored passwords?

I have a directory service that can speak a number of protocols and is used for user authentication. Currently user credentials are stored using Bcrypt to protect them in case of a compromised ...
1
vote
1answer
444 views

WPA 4 way handshake and authentication

I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication. Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I ...
0
votes
2answers
257 views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
2
votes
2answers
170 views

Can WiMAX track its users' geo position?

We all know that if you carry a GSM terminal with you, its location is being tracked and stored in operators' databases without any need of cooperation from the terminal itself. Is tracking user's ...
1
vote
2answers
100 views

Antivirus / Wireless PCI v2 Controls Scope

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
2
votes
1answer
153 views

Kismet Output Shows 3 Possible Encryption Options, Which one?

Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network. Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
3
votes
1answer
188 views

Strange packets coming over wireless, looking for clues

While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
2
votes
0answers
229 views

Where does the WPS Pin fit into the 4-way-handshake?

So I found a diagram online, that shows the 4-way-handshake: The way I understand it, when a station (STA) is trying to authenticate to an access point (AP), the AP sends the ANonce (authentication ...
1
vote
2answers
795 views

Is it practically possible to spoof a WLAN access point?

I want to try something out, but I wanted to see other opinions from you guys. What I have: WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
0
votes
3answers
139 views

Trace wireless connections in airplane mode

I was wondering if turning on Airplane Mode really disables all wireless connections. If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
1
vote
1answer
274 views

Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
7
votes
4answers
479 views

Password-less network in skyscraper office

If a company has offices way up in a skyscraper, is it acceptable to have an open network without a password, as an easy-to-use courtesy to visiting guests? The only ones that possibly would be able ...
19
votes
1answer
801 views

Vehicle remote key security

How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key? How do car remote keys work? Do they use some kind of private/public keys, encryption? ...
4
votes
1answer
527 views

Hotspot with same SSID, how does authorization work?

My university has a wireless network I log into with my username and password. It's using PEAP. My phone and laptop automatically connect to this SSID when they detect the network. If someone sets up ...
0
votes
3answers
608 views

Reaver returns different WPS PSK and AP SSID each time it finds correct PIN

I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
-4
votes
2answers
203 views

What kind of Wi-Fi security protocol does not use encryption?

I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
0
votes
3answers
132 views

Can a computer's contents be downloaded wirelessly?

So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network? As a Ruby on Rails professional, ...
1
vote
2answers
1k views

ARP poisoning between a wired and wireless network

How can a ARP-Poisoning attack work in a mixed (wireless and wired) network? Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
0
votes
2answers
61 views

Can I communicate with a wireless device, without logging in the same LAN?

Suppose there are three devices: WPA2 protected AP linux laptop, accessing internet through tha AP linux laptop, not connected to the AP I own the third device and do not know the AP's password. I ...
0
votes
1answer
153 views

How do I map all active wireless devices inbound?

In any residential building, there is a multitude of WPA2-protected wireless access points. Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...