Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
2
votes
0answers
144 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
2
votes
1answer
373 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
2
votes
0answers
101 views

Scapy capturing Dot11 headers windows

Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
2
votes
0answers
156 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
1
vote
5answers
480 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
1
vote
2answers
197 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
1
vote
1answer
187 views

How does Amazon Fire TV know my name/account? [closed]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
1
vote
1answer
665 views

Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?

I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities. What I am really unable to realize is why it ...
1
vote
1answer
145 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
1
vote
1answer
231 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
1
vote
1answer
492 views

Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
1
vote
1answer
47 views

Does calling with wireless phone have enough security? [closed]

I'd like to know if calling with a wireless phone at home can be heard by neighbours and if it is safe.
1
vote
2answers
51 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
1
vote
1answer
52 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
1
vote
2answers
108 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
1
vote
1answer
3k views

Bruteforce using crunch and Aircrack (custom starting number?)

I'm trying to do a Bruteforce attack on a handshake taken from my wireless network that is not WPS enabled. The reason I'm doing it is because I'm testing how strong a 10 digit phone number is as a ...
1
vote
1answer
1k views

What are the weaknesses of WPA with TKIP?

I am researching about the weaknesses of WPA with TKIP. I have an idea that the AES-CCMP mode is better than TKIP, but what are the weakest points of TKIP? Also, I am wondering about the disadvantages ...
1
vote
2answers
110 views

Antivirus / Wireless PCI v2 Controls Scope

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
1
vote
1answer
222 views

Would it be possible to extract user agent strings from 3G/4G Data

At a location where 3G/4G Data is prohibited, would it be practically possible to extract user agent strings from 3G/4G Data and compared to a list of known mobile browsers, assuming that the correct ...
1
vote
1answer
878 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
1
vote
1answer
273 views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
1
vote
3answers
351 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
1
vote
2answers
75 views

Criteria for an ADSL wireless modem

I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what are the criteria I should consider, and which security features should I look for? How should I compare ...
1
vote
1answer
2k views

WPA 4 way handshake and authentication

I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication. Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I ...
1
vote
1answer
738 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
1answer
133 views

What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?

I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
1
vote
2answers
2k views

How do I find a target on the wired network, from an attack system on Wi-Fi?

I'm trying to practice penetration testing on my home network. The target system is my desktop computer, which is connected to the network via ethernet cable. The attack system is my laptop, which is ...
1
vote
1answer
522 views

RADIUS proxy chains

RADIUS is a widely deployed remote authentication protocol. I'm looking here at its use in wireless roaming. The RADIUS protocol allows for proxies and chains of proxies: |CLIENT|<->|Access ...
1
vote
2answers
211 views

What NIC for a NUC? [closed]

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
1
vote
0answers
193 views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...
1
vote
0answers
71 views

Anything more i can do to be more safer? [closed]

Wi-fi security: WPS disabled WPA2-PSK + AES + 54.000 SECONDS(15h) Group Key Update Period UpnP disabled Spi firewall enable All ALG enable Ignore ping packet from WAN and Lan to router Default ...
1
vote
1answer
418 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
0answers
3k views

Whole system ACK flood attack making internet slow

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
1
vote
1answer
161 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
0answers
1k views

Automatic router admin password change [closed]

I feel that this is definitely a hack of some sort and an interesting one. I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face: * First, I disconnect the telephone line from the ...
1
vote
1answer
185 views

Do WPA-Enterprise implementations have built-in anti-IP-spoofing?

i'd like to know if WPA-Enterprise implementations have built-in anti-IP-spoofing. here's what i mean: it seems to me like IP spoofing should be easily detectable and handled under WPA-Enterprise. ...
1
vote
3answers
110 views

Prevent MITM between custom phone app and local server

We're building a Wifi enabled device. The device will be installed locally on each client's office and people in the the small office will connect to this Wifi enabled device, They will send/receive ...
1
vote
2answers
126 views

Is it possible to set up a second router with the same SSID to get the password? [duplicate]

Suppose we have an WLAN which is secured with WPA2. Its SSID is easybell123. Could an attacker who wants to get the password of easybell123 create a WLAN with the same SSID in the same area wait ...
1
vote
3answers
9k views

Getting access to MAC address of access point from a device wired to the network

My home network consists of a router (with wired and wireless connections), and a separate access point used to repeat the router wireless signal. A device is further wired to the access point; it ...
1
vote
2answers
187 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
0
votes
1answer
304 views

Why are cryptographic algorithms implemented in the data-link layer in wireless networks?

Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
0
votes
3answers
116 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
0
votes
3answers
139 views

Can a computer's contents be downloaded wirelessly?

So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network? As a Ruby on Rails professional, ...
0
votes
2answers
1k views

WiFi Hotspot's Evil Twin

So an Evil Twin Wifi hotspot is a hotspot with the same SSID and/or same MAC that when the victim auto-connect to this hotspot, all traffic go through this evil twin and thus the information ...
0
votes
1answer
166 views

How to stop programs like airodump-ng from seing my client's MAC ID and sending deauth packets?

I'm quite familiar on the aircrack-ng suite and I was wondering if there is a way to stop airodump-ng mon0 from seeing my client's MAC IDs? This is very sensitive information a program can get without ...
0
votes
1answer
171 views

Is (WEP) shared key authentication secure?

I've been reading up on wireless authentication and shared key authentication sounds completely bonkers. I know WEP is very insecure and breaking it with aircrack-ng takes 5-15 minutes but this sounds ...
0
votes
2answers
1k views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
0
votes
3answers
361 views

Trace wireless connections in airplane mode

I was wondering if turning on Airplane Mode really disables all wireless connections. If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
0
votes
3answers
820 views

Attack vectors opened simultaneous wireless and wired networks

I've seen some contention around the issue of whether or not wireless connections should be disabled in an environment where a wired domain and unregulated wireless network are both present. What ...