Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

2
votes
2answers
2k views

Is it practically possible to spoof a WLAN access point?

I want to try something out, but I wanted to see other opinions from you guys. What I have: WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
0
votes
3answers
192 views

Trace wireless connections in airplane mode

I was wondering if turning on Airplane Mode really disables all wireless connections. If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
1
vote
1answer
306 views

Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
7
votes
4answers
505 views

Password-less network in skyscraper office

If a company has offices way up in a skyscraper, is it acceptable to have an open network without a password, as an easy-to-use courtesy to visiting guests? The only ones that possibly would be able ...
21
votes
1answer
2k views

Vehicle remote key security

How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key? How do car remote keys work? Do they use some kind of private/public keys, encryption? ...
4
votes
1answer
958 views

Hotspot with same SSID, how does authorization work?

My university has a wireless network I log into with my username and password. It's using PEAP. My phone and laptop automatically connect to this SSID when they detect the network. If someone sets up ...
0
votes
3answers
917 views

Reaver returns different WPS PSK and AP SSID each time it finds correct PIN

I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
-4
votes
2answers
211 views

What kind of Wi-Fi security protocol does not use encryption?

I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
0
votes
3answers
136 views

Can a computer's contents be downloaded wirelessly?

So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network? As a Ruby on Rails professional, ...
1
vote
2answers
3k views

ARP poisoning between a wired and wireless network

How can a ARP-Poisoning attack work in a mixed (wireless and wired) network? Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
0
votes
2answers
70 views

Can I communicate with a wireless device, without logging in the same LAN?

Suppose there are three devices: WPA2 protected AP linux laptop, accessing internet through tha AP linux laptop, not connected to the AP I own the third device and do not know the AP's password. I ...
0
votes
1answer
218 views

How do I map all active wireless devices inbound?

In any residential building, there is a multitude of WPA2-protected wireless access points. Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...
1
vote
2answers
1k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
20
votes
2answers
6k views

How is wireless WiFi password cracked?

Let's say I have a wireless network that is password protected. What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
0
votes
2answers
308 views

Cookie stealing, what prevents a rogue wireless AP from stealing website cookies?

If you set up a rogue AP with the same SSID as a commonly-known wireless access point, what prevents you from forging DNS queries answering with your own web server and stealing people's login ...
0
votes
2answers
468 views

Is there a way to configure WPA2-PSK to provide Forward Secrecy?

Is there a way to secure an wireless connection against a decryption attack where the PSK is known (E.G. Airdecap-NG)? Is it possible to configure Forward Secrecy on 802.11 Wireless Connections?
2
votes
3answers
15k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
4
votes
1answer
5k views

Is brute-forcing the only way to crack WPA?

I don't know much about how WPA algorithms work internally. Is brute-forcing an AP the only way to crack WPA? (or to get associated with AP) Another question is about Reaver-WPS, what if an access ...
-4
votes
1answer
297 views

How to prevent malware infection and file accessibility through a wireless router? [duplicate]

The answer suggested in the 'duplicate' is about a different issue. But since my original wording of the question seems to have not been clear - here's a second attempt: Is there any danger of any of ...
3
votes
3answers
238 views

How do open (no password) wireless networks deal with abuse?

Many places today such as restaurants, malls, and other public places have free and open WiFi that does not need a password or login information to access. That means that anyone, even people outside ...
1
vote
1answer
574 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
3
votes
3answers
2k views

How to capture wireless data from an intruder using a home router

After my house mate experienced consistent ping spikes whilst gaming, he asked me to check/set the wireless router password. I did and I found two intruders from obviously nearby. How can the data ...
6
votes
3answers
169 views

What would be the application-level equivalent of dynamic communication secrets?

I'm probably just thick and sufficiently new to security related issues in software development, but since I can't find information and I've been stuck on Googling this for a while. Recently I came ...
21
votes
2answers
3k views

What is the difference between Promiscuous and Monitor Mode in Wireless Networks?

In Wireless Networks, you can put your wireless card in Promiscuous or in Monitor Mode. What is the difference between these two modes ?
3
votes
1answer
147 views

What are the requirements to sniff UDP packets in a Wireless Ad-Hoc network?

In a wireless Ad-Hoc network, I have two computers which communicates in UDP together from 192.168.1.3 to 192.168.1.5 I have a third computer (192.168.1.6) which wants to listen to the packets which ...
1
vote
1answer
123 views

What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?

I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
-6
votes
1answer
1k views

Hack a LAN with low security [closed]

In our university users have to use VPN to connect to internet.But for local works(like login to university website,checking their university accounts) VPN is not needed.And as I know we have ...
3
votes
2answers
2k views

how to monitor a Wifi (802.11) network?

How to capture a sequential stream of data between two machines, making no assumptions about network layer protocols? On wired network, one can do it by ARP spoofing and then sniff the network. One ...
-3
votes
2answers
160 views

How to camouflage the IP packages in a Home share wireless router? [duplicate]

I want to be able to hide my IP packages at best connecting to my router that I am sharing with other people in my house. Is it possible? Can I encapsulate them and let them unreadable?
4
votes
1answer
443 views

Measuring SNR to detect jammers in Wi-Fi networks

I'm trying to figure out a way to detect a Wi-Fi 2.4 GHz signal Jammer. I am not looking into locating the location of the jammer but rather detect the jamming signal. How do i do so using only ...
5
votes
3answers
261 views

Security difference in wardriving open network versus monitoring traffic on a network to which I am authenticated

I have been listening to the CBT nuggets on comptia security+ and there were a few sections on wireless security. A question that occurred to me was: if I am authorized to use a wireless network, and ...
1
vote
0answers
627 views

Automatic router admin password change [closed]

I feel that this is definitely a hack of some sort and an interesting one. I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face: * First, I disconnect the telephone line from the ...
20
votes
2answers
669 views

Aviation security - Lessons to learn from PlaneSploit

A somewhat related question has already been asked (What would one need to do in order to hijack a satellite?), only at a more abstract level. Now we have a presentation by Hugo Teso from n.runs AG ...
-3
votes
2answers
255 views

How do cellphones discover wireless APs? [closed]

I'm trying to find some information on how cellphones discover which wireless networks are in range? Is it via ARP or DHCP discover? Also how often does a cellphone do this polling? I can't find any ...
3
votes
2answers
455 views

Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?

I understand that there are many applications such as Snort that do the job for network layer 3 IDS. From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
2answers
197 views

Wireless Security: PEAP

I was wondering if there are any known attacks against PEAP used in wireless authentication/authorization? I'm specifically looking for attacks that would allow: bypassing the authentication ...
4
votes
1answer
116 views

Tracing Wireless Card

Let's say that hypothetically someone had broken into a WiFi connection. We can't find any evidence of whom it is via sniffing the traffic or anything of the sort. Is there any way to triangulate ...
3
votes
1answer
1k views

Are Kismet (on OpenWRT) and Snort IDS (on a linux server) compatitble?

I'm trying to develop an IDS/IPS system project to include these elements: A router running OpenWRT running Kismet drone (Attitude Adjustment 12.09rc1) A Linux server (Running Kismet server + client) ...
1
vote
1answer
148 views

Do WPA-Enterprise implementations have built-in anti-IP-spoofing?

i'd like to know if WPA-Enterprise implementations have built-in anti-IP-spoofing. here's what i mean: it seems to me like IP spoofing should be easily detectable and handled under WPA-Enterprise. ...
1
vote
2answers
951 views

How do I find a target on the wired network, from an attack system on Wi-Fi?

I'm trying to practice penetration testing on my home network. The target system is my desktop computer, which is connected to the network via ethernet cable. The attack system is my laptop, which is ...
22
votes
6answers
76k views

If someone hacks my wi-fi connnection, what can they see and how?

I have two questions on wifi security: If someone knows my wifi password (be it WEP or WPA) what can they see on my screen? Do they just see URLs I visit, or can they see everything in my ...
6
votes
2answers
7k views

How to discover if there is someone else connected to my wireless router?

I have a wireless router (WPA/WPA2) that is connected to my modem, so I can use wi-fi internet on my laptop. So, I'd like to know if there is any tool that allows me to discover if there is someone ...
3
votes
2answers
178 views

Are there any extra security risks with leaving wireless enabled while ethernet is connected?

Mainly I'm wondering if operating systems will always use ethernet for internet connections if it is available, falling back to wireless when it is not. My thinking is based around the security ...
7
votes
2answers
7k views

Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?

is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks. If it can, how, but if not, is there another ...
3
votes
1answer
481 views

Metasploit Wifi Modules Asking for lorcon2

I'm using Metasploit Framework for Wifi Exploiation, on Backtrack R2, but I'm getting this error: The Lorcon2 module is not available: no such file to load -- Lorcon2 But actually, I have installed ...
3
votes
5answers
5k views

How to Investigate Wi-Fi Intrusion and where to look for evidence?

I'm trying to figure out how to configure a network so that I can tell what an intruder did (in the past) while on the network after they are detected. eg. If someone with a wi-fi enabled laptop ...
-2
votes
2answers
5k views

What are the methods to crack WPA and WPA2? [closed]

Is there any method other than brute force and dictionary attacks to break WPA and WPA2?
1
vote
1answer
3k views

Wifi login redirect applications

This may sound a bit naive questions as i am a beginner. But I do my best to put it into words. You may have experience when sometimes you want to use the internet in a cafe for example (with your ...
1
vote
1answer
170 views

Would it be possible to extract user agent strings from 3G/4G Data

At a location where 3G/4G Data is prohibited, would it be practically possible to extract user agent strings from 3G/4G Data and compared to a list of known mobile browsers, assuming that the correct ...
4
votes
1answer
575 views

How to simulate a WEP cracking scenario for faster cracking in local lab?

I need to illustrate WEP cracking methods, I'll be using aircrack suit for that. There is a little problem that I want to speed up the method for very fast packet capturing, since this is just an ...