Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

1
vote
0answers
58 views

Knowing the MAC adress of a stolen laptop [migrated]

Recently my HP 1000 laptop was stolen, is there any way to find its MAC address? I connected my laptop to a PTCL EVO (Pakistan) WiFi USB dongle, but in the device options there is nothing I could ...
0
votes
1answer
142 views

802.11w protected management frames - Wi-Fi

I've been reading about protected management frames, introduced in 802.11w, and had a few questions. Apparently, a message integrity check is provided with de-authentication frames, allowing either ...
1
vote
2answers
37 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
0
votes
0answers
40 views

Sniffing wireless LAN network using tcpdump [migrated]

If I correctly understood the basics of the wireless working, I should be able to sniff the traffic of other computers over the wireless LAN. So I connected a second computer to my wireless LAN and ...
22
votes
2answers
9k views

How is wireless WiFi password cracked?

Let's say I have a wireless network that is password protected. What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
1
vote
1answer
367 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
69
votes
16answers
13k views

Trying to keep high school students out of the Wi-Fi network

I'm a teacher and IT person at a small K-12 school. The students are not supposed to have phones, laptops or access to the network. However, students being students they will try to find a way around ...
2
votes
0answers
25 views

How do I sniff Z-Wave packets with a Zulu Transceiver [closed]

I'm trying to sniff the communication between Z-Wave devices. I have set up a "smart home" consisting of a few devices using Z-Wave technology, which use the frequency 868 MHz. I have been told that ...
3
votes
1answer
364 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
0
votes
0answers
21 views

Capturing beacon frames in 802.11 [migrated]

How can I capture 802.11 beacon frames on my linux machine using a C program.Also how can I send a frame response using a C program?
11
votes
3answers
14k views

How is 4G LTE encrypted?

After a few quick searches for 3G security I was able to learn that this standard uses the KASUMI block cipher, of which several weaknesses have been identified (although apparently none of practical ...
0
votes
3answers
67 views

Is it possible for an attacker to redirect a packet sent by a client, modify it then sent to original server

Theoretical question: Is it possible, or will it ever be possible, for an attacker to sniff/intercept it and redirect a packet, sent from a client through wireless, modify it and then sent to the ...
2
votes
0answers
29 views

What features should I look for when buying a external wireless card used for the purpose of pen testing/snooping [duplicate]

I'm currently planning to buy an external wireless card for the purpose of pen testing and snooping my own network in order to learn more about it and try to create more preventive measure against ...
1
vote
1answer
149 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
2
votes
2answers
52 views

is it possible to detect zigbee traffice via wireshark? if yes , how?

I have a zigbee access point. I am not able to detect its network. Also, unable to capture its traffic using wireshark like we capture wifi traffic. Can someone tell me what should be done to analyse ...
0
votes
0answers
16 views

Setup WPS on TL-WR703N

I have a TP Link TL-WR703N Router that I am trying to setup as an educational tool to teach Wireless Security. As part of this, I want to setup an SSID that uses WPS as it's authentication method, ...
1
vote
1answer
105 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
0
votes
0answers
42 views

How secure are Ubiquiti Networks UniFi AP's restricted subnets?

I have a UniFI AP and create a quest network with subnet restriction 192.168.0.0/16. My local network is in 192.168.178.0/24. The gateway is 192.168.178.1. My question is: Is there a way that quests ...
9
votes
5answers
628 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
22
votes
2answers
922 views

Aviation security - Lessons to learn from PlaneSploit

A somewhat related question has already been asked (What would one need to do in order to hijack a satellite?), only at a more abstract level. Now we have a presentation by Hugo Teso from n.runs AG ...
1
vote
3answers
105 views

Prevent MITM between custom phone app and local server

We're building a Wifi enabled device. The device will be installed locally on each client's office and people in the the small office will connect to this Wifi enabled device, They will send/receive ...
2
votes
3answers
1k views

Does Windows 7 have built in wifi deauthentication attack protection?

I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be? I've got ...
0
votes
0answers
27 views

How are the sequence numbers generated in an 802.11 frame?

An 802.11 frame consists of sequence number in it. How are these sequence numbers generated? How random is it? Do these sequence numbers follow any particular pattern for the management frames in the ...
3
votes
2answers
145 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
1
vote
2answers
142 views

What NIC for a NUC? [closed]

I have been doing external pentests using the Intel NUC (D34010WYK1). It has been a very stable machine running Kali Linux. I am at point now that I would like to do some wireless testing. Has ...
2
votes
4answers
2k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
1
vote
1answer
128 views

How does Amazon Fire TV know my name/account? [closed]

I bought a Fire TV stick and inserted it into the HDMI-port of my TV. I was presented with a dialog to select my wireless router so it can connect online. Just after I did that, it asked me if I am ...
0
votes
1answer
45 views

What are the risks of file server access over wireless? [closed]

In our office, all computers connect to the network over wireless. The wireless is protected by a pass phrase and communication is AES encrypted. On the same network is a file server that is used ...
34
votes
7answers
4k views

How would you detect an Evil Twin attack, especially in a new environment?

Let's say you are traveling, and you pause in the airport lounge, or your hotel lobby, or a nearby coffee shop. You haul out your laptop and scan the available wireless networks. You know the name of ...
2
votes
1answer
663 views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
3answers
343 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
1
vote
2answers
112 views

Is it possible to set up a second router with the same SSID to get the password? [duplicate]

Suppose we have an WLAN which is secured with WPA2. Its SSID is easybell123. Could an attacker who wants to get the password of easybell123 create a WLAN with the same SSID in the same area wait ...
0
votes
1answer
291 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
12
votes
3answers
2k views

Why does Evil twin works?

https://en.wikipedia.org/wiki/Evil_twin_%28wireless_networks%29 My question: it's OK that someone can make an AP with the same MAC and SSID as the original AP. And with stronger signal. But what I ...
2
votes
0answers
126 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
13
votes
1answer
2k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
5
votes
1answer
7k views

Is brute-forcing the only way to crack WPA?

I don't know much about how WPA algorithms work internally. Is brute-forcing an AP the only way to crack WPA? (or to get associated with AP) Another question is about Reaver-WPS, what if an access ...
4
votes
4answers
279 views

Bank login in foreign country

I have friends andfamily that travel/live in foreign countries and compromised unsecure wireless networks and credit card scanners have always been a problem. I was recently asked a question about ...
2
votes
3answers
243 views

Can a wireless headphone (bluetooth) contain malware?

Can a wireless (bluetooth) headphone store data? Also, if it can, then can someone put malware in it? I assume that the device must necessarily be able to store some sort of data, since it has buttons ...
2
votes
1answer
12k views

Router detecting port scan and ack flood attack

Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
2
votes
2answers
25k views

Access router if you don't know password

At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
1
vote
1answer
104 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
0
votes
0answers
53 views

Why is the WLAN-Implementation so bad

If you are with your phone out of the house and you have wlan enabled. Your phone is screaming out to world i'm looking for the wlan with the name "yourhomewlanname". If someone has the router ...
0
votes
0answers
141 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
0
votes
1answer
100 views

How to stop programs like airodump-ng from seing my client's MAC ID and sending deauth packets?

I'm quite familiar on the aircrack-ng suite and I was wondering if there is a way to stop airodump-ng mon0 from seeing my client's MAC IDs? This is very sensitive information a program can get without ...
1
vote
2answers
106 views

Securing Laptop's Wireless

When ones goes into a public space, like a train or plane, how does one prevent their previously joined SSIDs from being broadcast? I noticed that my phone and tablet tend to try to join these ...
2
votes
3answers
323 views

promiscuous vs monitor mode in 802.11

I've been reading up on promiscuous mode and monitor mode as they relate to 802.11 networks. I understand the difference, which is explained here: What is the difference between Promiscuous and ...
4
votes
1answer
149 views

Tracing Wireless Card

Let's say that hypothetically someone had broken into a WiFi connection. We can't find any evidence of whom it is via sniffing the traffic or anything of the sort. Is there any way to triangulate ...
1
vote
1answer
103 views

Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?

For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
0
votes
1answer
88 views

How is PayPass/payWave secure when PIN is required after presenting the card to the contactless terminal?

The popular claim is that a chip-and-PIN payment card is more secure than a card with magnetic strip because the card data is hidden deep inside the chip and the ATM or POS terminal sends the entered ...