Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

0
votes
1answer
36 views

WEP man in the middle

my workplace is currently using a wireless router that is secured using WEP. If I connect a laptop to the wireless router with a cable, would someone that has cracked the password still be able to ...
-2
votes
0answers
40 views

Reaver WPA-PSK password doesn't work [on hold]

I cracked a WPA-PSK password using Reaver in Kali Linux. Unexpectedly this password doesn't work and I can not acces to the wireless network. I neither have the option to use the WPS password to acces ...
0
votes
0answers
30 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
0
votes
3answers
80 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
3
votes
3answers
187 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
31
votes
3answers
4k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
-1
votes
0answers
12 views

Static challenge in free radius server for PEAP

I was testing an old attack to capture MSCHAPv2 challenge and response using free radius- wpe edition. The setup does not use certificate validation and uses PEAP. I successfully captured many ...
4
votes
2answers
886 views

Data on Malicious WiFi Network

Let's assume that I unwittingly connect to a malicious WiFi network and visit websites. By malicious, I mean the network has been set up for the purpose of stealing data. From what I've read, using ...
0
votes
0answers
14 views

RT2800 USB: monitor mode using Virtual Box [migrated]

Information I am using a WiFi USB Adapter and the latest version of Kali running under VirtualBox. Chipset: Ralink RT2870/3070 Driver: rt2800usb Manufacturer: TP-Link FCC ID: TE7WN727NV3 It is ...
1
vote
0answers
44 views

Anything more i can do to be more safer? [closed]

Wi-fi security: WPS disabled WPA2-PSK + AES + 54.000 SECONDS(15h) Group Key Update Period UpnP disabled Spi firewall enable All ALG enable Ignore ping packet from WAN and Lan to router Default ...
1
vote
4answers
131 views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
0
votes
2answers
77 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
1
vote
1answer
40 views

Shielding electromagnetic wave

I tried putting mobile phone in a microwave oven and close it, putting the phone in a fridge, a cooker and close it,... every time the phone still can receive the call from other phone which means ...
2
votes
5answers
191 views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
0
votes
1answer
30 views

Mechanisms to prevent error propagation in wireless networks with respect to the avalanche effect [closed]

I was wondering what mechanisms exists that could be used to prevent error propagation in wireless networks and especially with respect to the avalanche effect. I know ARQ and FEC can be used, but ...
0
votes
1answer
48 views

Enabling wifi or bluetooth before user login in Linux

What would the security implications be of enabling and using wifi and / or bluetooth before a user logs into the system in a Linux box? Thanks for your help!
6
votes
2answers
207 views

Remediation against relay attacks (ie. NFC)

Question first: Is there any remediation for passive MITM? I've come across examples of NFC relay attacks which use phones to get around the proximity requirement for NFC payments. It looks ...
0
votes
0answers
32 views

What are European security standards in setting up a wireless ad hoc network?

I would like to know the major security standards I must follow while setting up an ad hoc wireless network in an organization situated in Europe. I am not sure about the length of my answer. If its ...
4
votes
1answer
131 views

Keyboards using 2.4GHz with AES

I got a Microsoft Sculpt keyboard, as it seems to be a small improvement over the much loved Ergo 4000. (What I'd give to have an Ergo 4000 with CheryMX Blues...) On various sites, they have this one ...
-1
votes
2answers
143 views

Can I create a fake AP with my wireless card? [closed]

I type iw list and these are the supported modes: Supported interface modes: * IBSS * managed When I run hostapd hostapd.conf I get this: Failed to create ...
10
votes
1answer
1k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
0
votes
1answer
119 views

Is (WEP) shared key authentication secure?

I've been reading up on wireless authentication and shared key authentication sounds completely bonkers. I know WEP is very insecure and breaking it with aircrack-ng takes 5-15 minutes but this sounds ...
2
votes
2answers
49 views

Is it possible to detect the type of key required when connecting to a wireless network?

So I was wondering if I could determine if a wireless network is asking for a specific type of key such as WEP/WPA ect? Or if it just takes the one you give it and processes that?
-4
votes
1answer
301 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
3
votes
2answers
99 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
2
votes
1answer
81 views

Identification info that my wireless card sends to the (wifi) network

Are any other identification information that my wireless card sends to the Wi-Fi network apart from the MAC address ? If so are they changeable? Let's say, for example, that I connect to a Wi-Fi ...
-1
votes
3answers
86 views

Can AES encryption prevent modifying bits in a wireless protocol?

I'm building an application with NFC which is a wireless communication protocol. An attacker can modify bits in a wireless communication protocol. I want to prevent this. I know we can't prevent an ...
4
votes
3answers
323 views

How does EAP/PEAP integrate with modern security protocols?

How exactly does Extensible Authentication Protocol (EAP)/Protected EAP integrate into modern security protocols? What I know (or not know) so far... It's used by wireless networks utilizing ...
2
votes
1answer
95 views

Open wireless network and OpenWRT isolation function - any risk?

What security risks would be caused by using a wireless router with no encryption for the wifi and by configuring it with: vi /etc/config/wireless option isolate 1 "HW" isolation. Running OpenWRT. ...
2
votes
1answer
308 views

Free hotspot: Open wifi vs. WPA2 wifi with known password

If we would want to give internet for free via WIFI, then what would be the better option and why from a security standpoint if we could only choose between: A non-encrypted wireless network setup ...
0
votes
1answer
107 views

Creating a secure home network - Which firm ware should I use and how should I configure my firewall?

I am starting to take on more and more enterprise clients while working remotely from my home office. I have a pretty secure network at the moment, but I have a lot hardware that I am not using and ...
1
vote
3answers
239 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
0
votes
2answers
520 views

WiFi Hotspot's Evil Twin

So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
1
vote
1answer
933 views

Bruteforce using crunch and Aircrack (custom starting number?)

I'm trying to do a Bruteforce attack on a handshake taken from my wireless network that is not WPS enabled. The reason I'm doing it is because I'm testing how strong a 10 digit phone number is as a ...
-1
votes
3answers
110 views

What's the most secure way to send information from one device to another?

I need to send sensitive information from one piece of hardware to another. I was thinking wifi, but if someone obtains the password, it wouldn't be encrypted. I don't think you can use ssl unless ...
4
votes
3answers
131 views

Does an insecure computer on my home wireless network threaten other machines?

I have a DD-WRT based wireless network with strong password security. However, other machines on the network may not be as protected as mine. If these machines are compromised, need I fear the ...
3
votes
1answer
129 views

What is a secure mechanism for wireless communication between Android and Ubuntu?

I have come across a few Android apps that provide various features for communicating with a desktop machine (sending text or typing in one direction or another, controlling the desktop pointer with ...
42
votes
6answers
5k views

Phones broadcast the SSIDs of all networks they have ever connected to. How can these be obtained by an attacker?

I just watched an interesting talk from Glen Glenn Wilkinson titled: The Machines that Betrayed their Masters. He said that your phone is constantly broadcasting all the SSIDs it has ever connected ...
1
vote
1answer
645 views

What are the weaknesses of WPA with TKIP?

I am researching about the weaknesses of WPA with TKIP. I have an idea that the AES-CCMP mode is better than TKIP, but what are the weakest points of TKIP? Also, I am wondering about the disadvantages ...
-1
votes
1answer
406 views

How can I trace MAC address of not asosciated devices in my WiFi network?

I'm looking for hints to solve my problem. I would like to trace all devices that are in my surroundings. I know how do it when someone already access to my WiFi network, but I'm also interested to ...
3
votes
1answer
304 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
3
votes
1answer
297 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
9
votes
1answer
1k views

Are networks using EAP-TLS affected by Heartbleed?

Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
0
votes
1answer
209 views

Why are cryptographic algorithms implemented in the data-link layer in wireless networks?

Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
-1
votes
1answer
233 views

If there is no handshake, then it is worthless to check for passwords?

# aircrack-ng output-01.cap Opening output-01.cap Read 31484 packets. # BSSID ESSID Encryption 1 00:11:22:33:44:55 SSIDHERE WPA (0 ...
2
votes
1answer
235 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
12
votes
2answers
2k views

Why does Evil twin works?

https://en.wikipedia.org/wiki/Evil_twin_%28wireless_networks%29 My question: it's OK that someone can make an AP with the same MAC and SSID as the original AP. And with stronger signal. But what I ...
1
vote
1answer
7k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
4
votes
2answers
118 views

Should I set different passwords for different Wi-Fi bands?

My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them. Now, since cracking just one of the two means that the attacker would ...
1
vote
2answers
67 views

Criteria for an ADSL wireless modem

I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what are the criteria I should consider, and which security features should I look for? How should I compare ...