Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

2
votes
2answers
60 views

What is airodump-ng able to detect?

Recently I bought a raspberry pi and some wifi adapters with monitoring mode. I installed airodump-ng to detect wifi devices in the vicinity and this seemed to be working well. Over the course of a ...
2
votes
1answer
84 views

Point-to-point Microwave Security

I have found online multiple references to sniffing attacks on point-to-point microwave links, either by sitting in the side lobes or on a rooftop within the line-of-sight path. However, my search on ...
2
votes
2answers
518 views

is it possible to detect zigbee traffice via wireshark? if yes , how?

I have a zigbee access point. I am not able to detect its network. Also, unable to capture its traffic using wireshark like we capture wifi traffic. Can someone tell me what should be done to analyse ...
2
votes
1answer
167 views

Identification info that my wireless card sends to the (wifi) network

Are any other identification information that my wireless card sends to the Wi-Fi network apart from the MAC address ? If so are they changeable? Let's say, for example, that I connect to a Wi-Fi ...
2
votes
3answers
1k views

Does Windows 7 have built in wifi deauthentication attack protection?

I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be? I've got ...
2
votes
1answer
314 views

Kismet Output Shows 3 Possible Encryption Options, Which one?

Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network. Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
2
votes
2answers
612 views

Where does the WPS Pin fit into the 4-way-handshake?

So I found a diagram online, that shows the 4-way-handshake: The way I understand it, when a station (STA) is trying to authenticate to an access point (AP), the AP sends the ANonce (authentication ...
2
votes
1answer
4k views

Wifi login redirect applications

This may sound a bit naive questions as i am a beginner. But I do my best to put it into words. You may have experience when sometimes you want to use the internet in a cafe for example (with your ...
2
votes
1answer
176 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
2
votes
3answers
1k views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
2
votes
1answer
344 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
2
votes
5answers
3k views

What is the best way to run MitM attack on my wireless network?

For research purpose, I want to launch a MitM attack on computers that are connected to my wireless network. I wonder what is the best way to do so. Notice that I control the router, and do not want ...
2
votes
1answer
429 views

Open wireless network and OpenWRT isolation function - any risk?

What security risks would be caused by using a wireless router with no encryption for the wifi and by configuring it with: vi /etc/config/wireless option isolate 1 "HW" isolation. Running OpenWRT. ...
2
votes
1answer
18k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
2answers
195 views

Are there any known attacks for a laptop with the wifi connection turned off?

I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
2
votes
1answer
206 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
2
votes
1answer
375 views

Airmon-ng confliciting with network manager in Kali

When starting monitor mode on wlan0 using airmon-ng start wlan0 I got a list of processes 'including network manager' that could cause troubles. I must kill those processes before starting airbase-ng ...
2
votes
0answers
196 views

ssh dns spoofing warning - possible investigation?

Recently the router my ISP provided started to work suspiciously. At times the wireless connection from my devices to the router breaks and the router stops responding while sometimes the connection ...
2
votes
0answers
49 views

Risks when connecting Public WLAN networks [closed]

I want to refer with my question directly to a question posted on the forum before. wifi topic I am running teamviewer on my android which is not rooted and i am not using a firewall on it. I guess ...
2
votes
0answers
118 views

How do I sniff Z-Wave packets with a Zulu Transceiver [closed]

I'm trying to sniff the communication between Z-Wave devices. I have set up a "smart home" consisting of a few devices using Z-Wave technology, which use the frequency 868 MHz. I have been told that ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
2
votes
1answer
446 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
2
votes
0answers
117 views

Scapy capturing Dot11 headers windows

Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
2
votes
0answers
166 views

Verizon wireless router is pinging my web server - is this ok or bad? [closed]

So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
1
vote
5answers
544 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
1
vote
2answers
131 views

Is my password visible on an SSL/TLS connection across unprotected wireless?

If I am using an insecure wireless network that has no security protocol at all and trying to connect to my encrypted online banking website, can an attacker who is sniffing the wireless network sees ...
1
vote
2answers
54 views

Resetting a hijacked router

If you reset a router that's been hijacked to factory defaults with the inbuilt reset button, will that take care of the problem?
1
vote
2answers
269 views

Can I connect to a network without being detected? [closed]

Some people use software like whoisonmywifi and so on. Is there a way to bypass this software? I think it pings all IP addresses like 192.168.1.0/24 so it will ping all addresses. Can I disable ...
1
vote
1answer
67 views

Bought used computer with working GSM card [closed]

I recently bought a used computer from a company. They are buying lots of computers from big companies and they refurbish them for resale. Today I discovered that my computer has an installed SIM ...
1
vote
3answers
69 views

Modern SOHO router protection

Much like the entropy 'myth' of '1337' speak passwords compared to overall password length, it seems that multiple modern 'PC advice' articles on the web still suggest hiding SSIDs and as MAC ...
1
vote
1answer
536 views

How does Amazon Fire TV know my name/account? [closed]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
1
vote
1answer
814 views

Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?

I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities. What I am really unable to realize is why it ...
1
vote
1answer
195 views

If I have my neighbors wireless router password, can I access his data with a smartphone?

My neighbor gave me his wireless router password to use on my smartphone. Using this, can I access any of his accounts whether it's his bank account or Att/Direct TV account? I ask because I think ...
1
vote
1answer
299 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
1
vote
1answer
264 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
1
vote
1answer
533 views

Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?

I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
1
vote
2answers
67 views

is the evil twin attack considered sniffing?

Is the evil twin attack included in the sniffing category ? I am really confused and i can't tell if it is.
1
vote
1answer
43 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it ...
1
vote
2answers
63 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
1
vote
1answer
139 views

How secure are DECT and 5.8Ghz Digital Cordless home Phones?

Is it safe to assume someone with $1,000-$3,000 U.S. to throw around can purchase the expertise or equipment to tap someone's modern cordless phone via a vulnerability, or otherwise? I mean someone ...
1
vote
1answer
68 views

Does calling with wireless phone have enough security? [closed]

I'd like to know if calling with a wireless phone at home can be heard by neighbours and if it is safe.
1
vote
2answers
78 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
1
vote
1answer
57 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
1
vote
1answer
3k views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
1
vote
2answers
112 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
1
vote
1answer
4k views

Bruteforce using crunch and Aircrack (custom starting number?)

I'm trying to do a Bruteforce attack on a handshake taken from my wireless network that is not WPS enabled. The reason I'm doing it is because I'm testing how strong a 10 digit phone number is as a ...
1
vote
2answers
113 views

Antivirus / Wireless PCI v2 Controls Scope

Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
1
vote
1answer
236 views

Would it be possible to extract user agent strings from 3G/4G Data

At a location where 3G/4G Data is prohibited, would it be practically possible to extract user agent strings from 3G/4G Data and compared to a list of known mobile browsers, assuming that the correct ...
1
vote
3answers
230 views

A neighbor took the Mac address from my router

It would appear one of my neighbours is monitoring my internet traffic, I am wondering firstly how is this possible and secondly would using a VPN stop the attacker from being able to read / intercept ...
1
vote
1answer
47 views

Achieving 'frequency separation' in wireless networks

A popular recommendation from security providers is to ensure wireless networks achieve 'frequency separation' from other wireless networks. What does 'frequency separation' mean in technical terms ...