Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

1
vote
1answer
2k views

Bruteforce using crunch and Aircrack (custom starting number?)

I'm trying to do a Bruteforce attack on a handshake taken from my wireless network that is not WPS enabled. The reason I'm doing it is because I'm testing how strong a 10 digit phone number is as a ...
1
vote
1answer
1k views

What are the weaknesses of WPA with TKIP?

I am researching about the weaknesses of WPA with TKIP. I have an idea that the AES-CCMP mode is better than TKIP, but what are the weakest points of TKIP? Also, I am wondering about the disadvantages ...
1
vote
2answers
109 views

Antivirus / Wireless PCI v2 Controls Scope

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
1
vote
1answer
3k views

Wifi login redirect applications

This may sound a bit naive questions as i am a beginner. But I do my best to put it into words. You may have experience when sometimes you want to use the internet in a cafe for example (with your ...
1
vote
1answer
206 views

Would it be possible to extract user agent strings from 3G/4G Data

At a location where 3G/4G Data is prohibited, would it be practically possible to extract user agent strings from 3G/4G Data and compared to a list of known mobile browsers, assuming that the correct ...
1
vote
4answers
205 views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
1
vote
3answers
341 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
1
vote
2answers
70 views

Criteria for an ADSL wireless modem

I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what are the criteria I should consider, and which security features should I look for? How should I compare ...
1
vote
1answer
2k views

WPA 4 way handshake and authentication

I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication. Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I ...
1
vote
1answer
687 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
1answer
129 views

What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?

I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
1
vote
2answers
1k views

How do I find a target on the wired network, from an attack system on Wi-Fi?

I'm trying to practice penetration testing on my home network. The target system is my desktop computer, which is connected to the network via ethernet cable. The attack system is my laptop, which is ...
1
vote
1answer
488 views

RADIUS proxy chains

RADIUS is a widely deployed remote authentication protocol. I'm looking here at its use in wireless roaming. The RADIUS protocol allows for proxies and chains of proxies: |CLIENT|<->|Access ...
1
vote
2answers
99 views

What NIC for a NUC? [closed]

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
1
vote
0answers
61 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
1
vote
0answers
87 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
1
vote
0answers
54 views

Anything more i can do to be more safer? [closed]

Wi-fi security: WPS disabled WPA2-PSK + AES + 54.000 SECONDS(15h) Group Key Update Period UpnP disabled Spi firewall enable All ALG enable Ignore ping packet from WAN and Lan to router Default ...
1
vote
0answers
3k views

Whole system ACK flood attack making internet slow

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
1
vote
1answer
140 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
0answers
1k views

Automatic router admin password change [closed]

I feel that this is definitely a hack of some sort and an interesting one. I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face: * First, I disconnect the telephone line from the ...
1
vote
1answer
177 views

Do WPA-Enterprise implementations have built-in anti-IP-spoofing?

i'd like to know if WPA-Enterprise implementations have built-in anti-IP-spoofing. here's what i mean: it seems to me like IP spoofing should be easily detectable and handled under WPA-Enterprise. ...
1
vote
3answers
101 views

Prevent MITM between custom phone app and local server

We're building a Wifi enabled device. The device will be installed locally on each client's office and people in the the small office will connect to this Wifi enabled device, They will send/receive ...
1
vote
2answers
102 views

Is it possible to set up a second router with the same SSID to get the password? [duplicate]

Suppose we have an WLAN which is secured with WPA2. Its SSID is easybell123. Could an attacker who wants to get the password of easybell123 create a WLAN with the same SSID in the same area wait ...
1
vote
3answers
8k views

Getting access to MAC address of access point from a device wired to the network

My home network consists of a router (with wired and wireless connections), and a separate access point used to repeat the router wireless signal. A device is further wired to the access point; it ...
0
votes
1answer
250 views

Why are cryptographic algorithms implemented in the data-link layer in wireless networks?

Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
0
votes
3answers
137 views

Can a computer's contents be downloaded wirelessly?

So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network? As a Ruby on Rails professional, ...
0
votes
3answers
103 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
0
votes
2answers
961 views

WiFi Hotspot's Evil Twin

So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
0
votes
1answer
74 views

How to stop programs like airodump-ng from seing my client's MAC ID and sending deauth packets?

I'm quite familiar on the aircrack-ng suite and I was wondering if there is a way to stop airodump-ng mon0 from seeing my client's MAC IDs? This is very sensitive information a program can get without ...
0
votes
1answer
149 views

Is (WEP) shared key authentication secure?

I've been reading up on wireless authentication and shared key authentication sounds completely bonkers. I know WEP is very insecure and breaking it with aircrack-ng takes 5-15 minutes but this sounds ...
0
votes
2answers
935 views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
0
votes
3answers
291 views

Trace wireless connections in airplane mode

I was wondering if turning on Airplane Mode really disables all wireless connections. If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
0
votes
3answers
761 views

Attack vectors opened simultaneous wireless and wired networks

I've seen some contention around the issue of whether or not wireless connections should be disabled in an environment where a wired domain and unregulated wireless network are both present. What ...
0
votes
1answer
38 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
0
votes
3answers
3k views

Do i need to have Airpcap?

Hi I am learning system security in an online course, in a practical experiment I tried to monitor the traffic through my router using wireshark1.10.3 but i have a feeling that it only sensing traffic ...
0
votes
1answer
155 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
3answers
1k views

Reaver returns different WPS PSK and AP SSID each time it finds correct PIN

I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
0
votes
1answer
182 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
0
votes
1answer
76 views

How is PayPass/payWave secure when PIN is required after presenting the card to the contactless terminal?

The popular claim is that a chip-and-PIN payment card is more secure than a card with magnetic strip because the card data is hidden deep inside the chip and the ATM or POS terminal sends the entered ...
0
votes
1answer
65 views

WEP man in the middle

my workplace is currently using a wireless router that is secured using WEP. If I connect a laptop to the wireless router with a cable, would someone that has cracked the password still be able to ...
0
votes
1answer
37 views

Mechanisms to prevent error propagation in wireless networks with respect to the avalanche effect [closed]

I was wondering what mechanisms exists that could be used to prevent error propagation in wireless networks and especially with respect to the avalanche effect. I know ARQ and FEC can be used, but ...
0
votes
1answer
58 views

Enabling wifi or bluetooth before user login in Linux

What would the security implications be of enabling and using wifi and / or bluetooth before a user logs into the system in a Linux box? Thanks for your help!
0
votes
1answer
164 views

Creating a secure home network - Which firm ware should I use and how should I configure my firewall?

I am starting to take on more and more enterprise clients while working remotely from my home office. I have a pretty secure network at the moment, but I have a lot hardware that I am not using and ...
0
votes
3answers
128 views

What's the most secure way to send information from one device to another?

I need to send sensitive information from one piece of hardware to another. I was thinking wifi, but if someone obtains the password, it wouldn't be encrypted. I don't think you can use ssl unless ...
0
votes
1answer
999 views

Security of Moblie Hotspot (4G LTE, WiFi) vs. Apartment Complex Cable Internet

The overwhelming majority of my banking is done online. As such, I try to be as cautious as possible. I am moving into a new apartment in a few months which offers internet. (I am not sure whether it ...
0
votes
1answer
109 views

Is MS-CHAPv2 incompatible with securely stored passwords?

I have a directory service that can speak a number of protocols and is used for user authentication. Currently user credentials are stored using Bcrypt to protect them in case of a compromised ...
0
votes
2answers
93 views

Can I communicate with a wireless device, without logging in the same LAN?

Suppose there are three devices: WPA2 protected AP linux laptop, accessing internet through tha AP linux laptop, not connected to the AP I own the third device and do not know the AP's password. I ...
0
votes
1answer
329 views

How do I map all active wireless devices inbound?

In any residential building, there is a multitude of WPA2-protected wireless access points. Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...
0
votes
2answers
660 views

Is there a way to configure WPA2-PSK to provide Forward Secrecy?

Is there a way to secure an wireless connection against a decryption attack where the PSK is known (E.G. Airdecap-NG)? Is it possible to configure Forward Secrecy on 802.11 Wireless Connections?
0
votes
0answers
13 views

How secure are Ubiquiti Networks UniFi AP's restricted subnets?

I have a UniFI AP and create a quest network with subnet restriction 192.168.0.0/16. My local network is in 192.168.178.0/24. The gateway is 192.168.178.1. My question is: Is there a way that quests ...