Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

3
votes
3answers
3k views

How to capture wireless data from an intruder using a home router

After my house mate experienced consistent ping spikes whilst gaming, he asked me to check/set the wireless router password. I did and I found two intruders from obviously nearby. How can the data ...
3
votes
2answers
226 views

Are there any extra security risks with leaving wireless enabled while ethernet is connected?

Mainly I'm wondering if operating systems will always use ethernet for internet connections if it is available, falling back to wireless when it is not. My thinking is based around the security ...
3
votes
3answers
309 views

How do open (no password) wireless networks deal with abuse?

Many places today such as restaurants, malls, and other public places have free and open WiFi that does not need a password or login information to access. That means that anyone, even people outside ...
3
votes
2answers
617 views

Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?

I understand that there are many applications such as Snort that do the job for network layer 3 IDS. From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
3
votes
2answers
5k views

ARP poisoning between a wired and wireless network

How can a ARP-Poisoning attack work in a mixed (wireless and wired) network? Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
3
votes
2answers
280 views

Wireless Security: PEAP

I was wondering if there are any known attacks against PEAP used in wireless authentication/authorization? I'm specifically looking for attacks that would allow: bypassing the authentication ...
3
votes
2answers
155 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
3
votes
4answers
5k views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
3
votes
1answer
4k views

what is the role of RADiUS server and Active Directory to increase the security in wireless networks?

In the CBT Nuggets Video Training, one slide about Wireless networks : i want to know about the role of Radius to increase the security and how? in this project: Deploy Active Directory and ...
3
votes
1answer
65 views

Is it possible to steal WPA2 key using a rogue AP?

Without using a 'fishing' homepage explicitly asking for the user to retype the WPA key. Is it possible to catch the WPA key wich is sent to a rogue AP in the initial connection phase ?
3
votes
1answer
323 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
3
votes
1answer
2k views

Are Kismet (on OpenWRT) and Snort IDS (on a linux server) compatitble?

I'm trying to develop an IDS/IPS system project to include these elements: A router running OpenWRT running Kismet drone (Attitude Adjustment 12.09rc1) A Linux server (Running Kismet server + client) ...
3
votes
2answers
122 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
3
votes
1answer
198 views

What is a secure mechanism for wireless communication between Android and Ubuntu?

I have come across a few Android apps that provide various features for communicating with a desktop machine (sending text or typing in one direction or another, controlling the desktop pointer with ...
3
votes
1answer
574 views

De-auth attack Reason codes and possible reaction

I am learning about Deauth attacks and how they work. I see that the Deauth frame has a reason code which indicates the reason for the deauth. I have tested the attack with aircrack-ng and this reason ...
3
votes
1answer
657 views

Strange packets coming over wireless, looking for clues

While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
3
votes
1answer
558 views

Metasploit Wifi Modules Asking for lorcon2

I'm using Metasploit Framework for Wifi Exploiation, on Backtrack R2, but I'm getting this error: The Lorcon2 module is not available: no such file to load -- Lorcon2 But actually, I have installed ...
3
votes
1answer
384 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
2
votes
4answers
2k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
2
votes
2answers
314 views

Can WiMAX track its users' geo position?

We all know that if you carry a GSM terminal with you, its location is being tracked and stored in operators' databases without any need of cooperation from the terminal itself. Is tracking user's ...
2
votes
3answers
165 views

Protecting wireless network

My wireless network protected under WPA-PSK/WPA2-PSK protocol. Is there a good reason to change the default user/password for the router management interface? What would it take for an hacker to ...
2
votes
1answer
1k views

Free hotspot: Open wifi vs. WPA2 wifi with known password

If we would want to give internet for free via WIFI, then what would be the better option and why from a security standpoint if we could only choose between: A non-encrypted wireless network setup ...
2
votes
2answers
26k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
2
votes
2answers
40k views

Router admin password was changed, how did this happen and how to prevent [closed]

Internet was extremely spotty for about a week. I was on/off cycling the cable model and router almost daily, before I tried to sign into my router (198.162.1.1). When I did I was presented with a ...
2
votes
3answers
288 views

Passwords In Securing Network Devices

I don't do anything with corporate IT and networking, but I know enough to handle and get networks going. Anyway, something I ran into in my travels when it comes to the occasions of working on ...
2
votes
3answers
439 views

promiscuous vs monitor mode in 802.11

I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here: What is the difference between Promiscuous and ...
2
votes
2answers
87 views

Is it possible to detect the type of key required when connecting to a wireless network?

So I was wondering if I could determine if a wireless network is asking for a specific type of key such as WEP/WPA ect? Or if it just takes the one you give it and processes that?
2
votes
1answer
507 views

Locate rogue wireless access point using Kismet data

Is there any way how to use Kismet data to locate rogue wireless access points?
2
votes
2answers
576 views

Wireless Positioning System (WPS) works without Internet?

As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
2
votes
1answer
56 views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
2
votes
2answers
66 views

is it possible to detect zigbee traffice via wireshark? if yes , how?

I have a zigbee access point. I am not able to detect its network. Also, unable to capture its traffic using wireshark like we capture wifi traffic. Can someone tell me what should be done to analyse ...
2
votes
1answer
1k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
2
votes
1answer
124 views

Identification info that my wireless card sends to the (wifi) network

Are any other identification information that my wireless card sends to the Wi-Fi network apart from the MAC address ? If so are they changeable? Let's say, for example, that I connect to a Wi-Fi ...
2
votes
3answers
1k views

Does Windows 7 have built in wifi deauthentication attack protection?

I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be? I've got ...
2
votes
1answer
278 views

Kismet Output Shows 3 Possible Encryption Options, Which one?

Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network. Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
2
votes
2answers
482 views

Where does the WPS Pin fit into the 4-way-handshake?

So I found a diagram online, that shows the 4-way-handshake: The way I understand it, when a station (STA) is trying to authenticate to an access point (AP), the AP sends the ANonce (authentication ...
2
votes
1answer
4k views

Wifi login redirect applications

This may sound a bit naive questions as i am a beginner. But I do my best to put it into words. You may have experience when sometimes you want to use the internet in a cafe for example (with your ...
2
votes
3answers
332 views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
2
votes
5answers
1k views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
2
votes
1answer
259 views

Open wireless network and OpenWRT isolation function - any risk?

What security risks would be caused by using a wireless router with no encryption for the wifi and by configuring it with: vi /etc/config/wireless option isolate 1 "HW" isolation. Running OpenWRT. ...
2
votes
1answer
13k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
2answers
162 views

Are there any known attacks for a laptop with the wifi connection turned off?

I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
2
votes
0answers
35 views

Risks when connecting Public WLAN networks [closed]

I want to refer with my question directly to a question posted on the forum before. wifi topic I am running teamviewer on my android which is not rooted and i am not using a firewall on it. I guess ...
2
votes
0answers
37 views

How do I sniff Z-Wave packets with a Zulu Transceiver [closed]

I'm trying to sniff the communication between Z-Wave devices. I have set up a "smart home" consisting of a few devices using Z-Wave technology, which use the frequency 868 MHz. I have been told that ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
2
votes
0answers
134 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
2
votes
1answer
362 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
2
votes
0answers
100 views

Scapy capturing Dot11 headers windows

Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
2
votes
0answers
152 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
1
vote
5answers
464 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...