Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

5
votes
1answer
84 views

32-bit Radio Voice Encryption, is it really that secure? If so, how?

I'm a student studying Electrical and Computer Engineering and a ham radio operator (i.e. my knowledge of encryption is basic). More and more, police and local government radio has become encrypted, ...
1
vote
3answers
77 views

Modern SOHO router protection

Much like the entropy 'myth' of '1337' speak passwords compared to overall password length, it seems that multiple modern 'PC advice' articles on the web still suggest hiding SSIDs and as MAC ...
0
votes
1answer
83 views

airodump-ng mon0 device

My laptop is in monitoring mode. I need to get the details of a client that makes probes and not include other bssid and their station. I run sudo airodump-ng -w s3 --bssid 74:de:2b:45:ed:d4 mon0 ...
-5
votes
2answers
178 views

If someone hacks my wifi connection what if any control do they have over radio waves in my house? [closed]

A couple questions on wifi security. If someone knows my wifi password (be it WEP or WPA) what kind of control do they have over radio waves? Can they emit radio waves from computers on my network? ...
1
vote
0answers
38 views

TLS in slow/unstable mobile/wireless networks [closed]

We have this rather old VPN tunnel software that is running in various wireless/mobile networks (from 2G mobile and upwards). It is currently running WTLS, as this software is from the old days when ...
2
votes
1answer
125 views

Point-to-point Microwave Security

I have found online multiple references to sniffing attacks on point-to-point microwave links, either by sitting in the side lobes or on a rooftop within the line-of-sight path. However, my search on ...
3
votes
2answers
121 views

Is another MAC address generated when a wireless is created using the same device for LAN?

I notice that the devices listed on the wireless system listed a MAC address that is supposed to be the router but it is not the same # that is on the router case. It differs by one one digit, *.98....
1
vote
2answers
121 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
1
vote
0answers
29 views

fakeauthentication is working when my belkin belkin router f7d2301 mac-address filtering enabled

Actually i have enabled mac-filtering in my belkin router and the security policy is none and the authentication is open authentication. Iam(attacker) using kali linux. when i done a fakeauth attack ...
3
votes
3answers
123 views

How dangerous is the remote Jeep Cherokee attack?

Recently two researchers working with a Wired Magazine reporter have demonstrated a serious vulnerability in UConnect, the software that powers the onboard entertainment systems of all Chrysler group ...
1
vote
0answers
91 views

problem with mdk3

I have a problem in using mdk3 on kali. I want to DOS my AP with deauthenticate packets. I use the command: Mdk3 mon0 d <AP mac address> I am sure that the command is true. It is not working ...
5
votes
6answers
2k views

Can one steal data using electric wire?

If I would like to keep my work secret in my computer and I don't use Internet, is it possible for a cracker to steal my data via electric wires or a wireless connection?
1
vote
0answers
109 views

Decrypting WLAN (WPA2) Traffic - What kind of Antenna to use?

In a Penetration test after receiving the PSK of a WPA2 WLAN it's possible to decrypt the wireless traffic using airdecap-ng for example. This works well as long as one recorded the associated four-...
1
vote
2answers
142 views

Is my password visible on an SSL/TLS connection across unprotected wireless?

If I am using an insecure wireless network that has no security protocol at all and trying to connect to my encrypted online banking website, can an attacker who is sniffing the wireless network sees ...
1
vote
1answer
222 views

If I have my neighbors wireless router password, can I access his data with a smartphone?

My neighbor gave me his wireless router password to use on my smartphone. Using this, can I access any of his accounts whether it's his bank account or Att/Direct TV account? I ask because I think ...
2
votes
5answers
593 views

Is the newly adopted NFC technology going to be safe?

I got sent a link today talking about how the business card company "Moo" is implementing a chip into their cards that will allow NFC connections to do many things such as share contact info, open a ...
2
votes
1answer
260 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
1
vote
1answer
256 views

How secure are DECT and 5.8Ghz Digital Cordless home Phones?

Is it safe to assume someone with $1,000-$3,000 U.S. to throw around can purchase the expertise or equipment to tap someone's modern cordless phone via a vulnerability, or otherwise? I mean someone ...
4
votes
3answers
77 views

How risky is to use non-free wireless network driver?

Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
2
votes
1answer
2k views

Airmon-ng confliciting with network manager in Kali

When starting monitor mode on wlan0 using airmon-ng start wlan0 I got a list of processes 'including network manager' that could cause troubles. I must kill those processes before starting airbase-ng -...
2
votes
1answer
97 views

Avoiding repeaters in radio-communication

Suppose a sender and a receiver communicate over some radio channel. Is there a way to prevent packets sent and received are not being repeated/forwarded by a MiTM? That is, when the agents are out of ...
1
vote
3answers
279 views

A neighbor took the Mac address from my router

It would appear one of my neighbours is monitoring my internet traffic, I am wondering firstly how is this possible and secondly would using a VPN stop the attacker from being able to read / intercept ...
7
votes
1answer
913 views

Is Bluetooth 4.0 traffic encrypted by default/design?

I wonder if the BLE (v4.0) traffic is encrypted by default or by design, or is it just optional? If the former, is the traffic encrypted using a key derived just from the pairing pin or is there some ...
0
votes
2answers
167 views

Detecting access point model

Is there any way to detect the model (brand, reference, ...) of a reachable wireless access point without having to connect to it? I've tried sniffing packets with Wireshark, but I can't get the ...
6
votes
2answers
665 views

How to Man-in-the-middle a whole network?

When performing a MiTM attack, you generally need to specify the router's IP address and the "victim" IP address. I'm trying to demonstrate to a business owner why he needs to secure his network, but ...
2
votes
0answers
273 views

ssh dns spoofing warning - possible investigation?

Recently the router my ISP provided started to work suspiciously. At times the wireless connection from my devices to the router breaks and the router stops responding while sometimes the connection ...
1
vote
1answer
48 views

Achieving 'frequency separation' in wireless networks

A popular recommendation from security providers is to ensure wireless networks achieve 'frequency separation' from other wireless networks. What does 'frequency separation' mean in technical terms ...
3
votes
0answers
58 views

WiFi Fingerprinting RFC2617 Linux Device Cannot Unauthenticate Unless AP Password Changes

There is a Cisco WiFi Access Point in the office that is intended for guests. It is an open network in that you can associate without providing a password with the SSID. It supports RFC2617 and so the ...
0
votes
1answer
244 views

Can the Belkin WeMo switch be attacked without the attacker knowing my WiFi password?

The Belkin WeMo switch lets you turn on and off electric sockets over WiFi using an app. Apart from the WiFi password, is there another potential vulnerability of this device that could let an ...
2
votes
1answer
2k views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
2
votes
0answers
49 views

Risks when connecting Public WLAN networks [closed]

I want to refer with my question directly to a question posted on the forum before. wifi topic I am running teamviewer on my android which is not rooted and i am not using a firewall on it. I guess ...
2
votes
2answers
398 views

Wireless password available in plaintext

Running below command in as admin from Windows : C:\Windows\system32>netsh wlan show profile name=MY_WIRELESS_NAME key=clear Outputs : Security settings Authentication : WPA2-Personal ...
1
vote
2answers
431 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
12
votes
2answers
146 views

Is my Windows phone protected from attacks that reveal list of ssids it knows about?

My goal is to see the SSIDs requested by mobile devices in my home. For example, my Windows phone knows about SSIDs called "coffee_shop", "planet_fitness" and "library". I have my phone set to "...
5
votes
1answer
373 views

Is it possible to steal WPA2 key using a rogue AP?

Without using a 'fishing' homepage explicitly asking for the user to retype the WPA key. Is it possible to catch the WPA key wich is sent to a rogue AP in the initial connection phase ?
1
vote
1answer
80 views

Does calling with wireless phone have enough security? [closed]

I'd like to know if calling with a wireless phone at home can be heard by neighbours and if it is safe.
2
votes
0answers
184 views

How do I sniff Z-Wave packets with a Zulu Transceiver [closed]

I'm trying to sniff the communication between Z-Wave devices. I have set up a "smart home" consisting of a few devices using Z-Wave technology, which use the frequency 868 MHz. I have been told that I'...
74
votes
16answers
17k views

Trying to keep high school students out of the Wi-Fi network

I'm a teacher and IT person at a small K-12 school. The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
0
votes
3answers
149 views

Is it possible for an attacker to redirect a packet sent by a client, modify it then sent to original server

Theoretical question: Is it possible, or will it ever be possible, for an attacker to sniff/intercept it and redirect a packet, sent from a client through wireless, modify it and then sent to the ...
2
votes
0answers
31 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
2
votes
2answers
1k views

is it possible to detect zigbee traffice via wireshark? if yes , how?

I have a zigbee access point. I am not able to detect its network. Also, unable to capture its traffic using wireshark like we capture wifi traffic. Can someone tell me what should be done to analyse ...
1
vote
2answers
90 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
3
votes
2answers
185 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
1
vote
3answers
125 views

Prevent MITM between custom phone app and local server

We're building a Wifi enabled device. The device will be installed locally on each client's office and people in the the small office will connect to this Wifi enabled device, They will send/receive ...
1
vote
1answer
800 views

How does Amazon Fire TV know my name/account? [closed]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
1
vote
1answer
68 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
6
votes
1answer
9k views

How does Dumpper program get default WPS without bruteforcing them?

Today I tried a program called Dumpper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of ...
1
vote
2answers
433 views

What NIC for a NUC? [closed]

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
39
votes
7answers
7k views

How would you detect an Evil Twin attack, especially in a new environment?

Let's say you are traveling, and you pause in the airport lounge, or your hotel lobby, or a nearby coffee shop. You haul out your laptop and scan the available wireless networks. You know the name of ...
1
vote
2answers
188 views

Is it possible to set up a second router with the same SSID to get the password? [duplicate]

Suppose we have an WLAN which is secured with WPA2. Its SSID is easybell123. Could an attacker who wants to get the password of easybell123 create a WLAN with the same SSID in the same area wait ...