Wireless security topics including 802.11, Bluetooth, and others.

learn more… | top users | synonyms

0
votes
1answer
45 views

airodump-ng mon0 device

My laptop is in monitoring mode. I need to get the details of a client that makes probes and not include other bssid and their station. I run sudo airodump-ng -w s3 --bssid 74:de:2b:45:ed:d4 mon0 ...
-1
votes
1answer
29 views

How easy is it to tamper with your devices for eavesdropping purposes if they have physical access to your computer/router? [closed]

I used Apple's Airport for my wifi needs and have a Macbook and other iOS devices connected to it. I have a roommate who in the eavesdropped on my web activity and snuck into my Facebook account and ...
2
votes
2answers
63 views

What is airodump-ng able to detect?

Recently I bought a raspberry pi and some wifi adapters with monitoring mode. I installed airodump-ng to detect wifi devices in the vicinity and this seemed to be working well. Over the course of a ...
1
vote
1answer
67 views

Bought used computer with working GSM card [closed]

I recently bought a used computer from a company. They are buying lots of computers from big companies and they refurbish them for resale. Today I discovered that my computer has an installed SIM ...
0
votes
0answers
25 views

Difference between WPA, WPA2 and mixed mode on packets level

What is the difference between wpa, wpa2 and mixed mode, particulary how 4-way handshake packets look-like for every type? Is there any good lecture about it with packets examples? Above question ...
0
votes
1answer
21 views

Are there any feasible solutions/workarounds for WPA2 hole196 vulnerability as of today?

I just read about a post linked to from archived MichaƂ Zalewski's archived post on wireless security and heard of an insider-only WPA2 flaw that lets anyone who knows the wireless password snoop on ...
10
votes
4answers
1k views

Can someone use WiFi snooping to see data I send through Tor Browser when I'm not using SSL?

(NOTE: I've read other similar questions, but I'm not at all certain about this, therefore I'm asking.) I travel a lot, and I generally use public WiFi spots and hotels/hostels/boarding houses etc. ...
0
votes
2answers
89 views

Is the typical hotel wifi authentication insecure? [duplicate]

I saw many hotels use unencrypted wifi and then expect you to type in a wifi password over HTTPS. All HTTPS website requests are captured, and you get an "untrusted certificate" warning and HTTP ...
1
vote
2answers
69 views

is the evil twin attack considered sniffing?

Is the evil twin attack included in the sniffing category ? I am really confused and i can't tell if it is.
1
vote
1answer
551 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
3
votes
1answer
234 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
0
votes
0answers
24 views

GPS security standards

Are there any GPS (global position) security standards to secure any kind of GPS implementation? For e.g GPS software coding standards, GPS traffic encryption standards? I asked because nowadays there ...
3
votes
2answers
58 views

Is another MAC address generated when a wireless is created using the same device for LAN?

I notice that the devices listed on the wireless system listed a MAC address that is supposed to be the router but it is not the same # that is on the router case. It differs by one one digit, ...
-1
votes
0answers
28 views

Distributed Transmission in Protecting Satellites from Attacks?

Assume that the attacker knows with a time lag tau the location and input frequency of the satellite because he can detect and estimate the frequency of the satellite. He can pump a greater radiated ...
4
votes
1answer
514 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
-1
votes
1answer
43 views

what are some of the common routers people use for penetration testing? [closed]

So, I was looking for a router to penetration test on because the one I have is very difficult. What are some of the well-known routers that are supposed to work for beginners to penetration test on?
0
votes
3answers
99 views

Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?

I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet. Also, what if the router ...
3
votes
1answer
32 views

Airodump-ng -1 DB networks

I'm using airodump-ng to test my network's integrity and when I put Airodump-ng into monitoring mode, I see some networks with no ESSID and the PWR is -1. What are these networks? Are these hidden ...
8
votes
1answer
377 views

Is Bluetooth 4.0 traffic encrypted by default/design?

I wonder if the BLE (v4.0) traffic is encrypted by default or by design, or is it just optional? If the former, is the traffic encrypted using a key derived just from the pairing pin or is there some ...
1
vote
2answers
413 views

Wireless Testing - monitor mode issues

I am currently learning about Wireless testing and have stumbled across a couple of little issues. The system setup I am working on is as outlined below: Kali Linux - 64-Bit (GNOME v3.4.2) Virtual ...
5
votes
4answers
245 views

How can I intercept video over a wireless network in real time?

Can you sniff the packets or use a network analyzer or MITM or ARP spoofing to somehow be able to see the videos that someone else is watching on a network in real time? Also: Can you somehow see ...
3
votes
1answer
38 views

Wireless card simultaneously in monitor mode and managed mode

I am looking to create a small first project to further my self education into infosec. I will be putting this on my Github. My idea is to create a script that automates the process of deauthing all ...
16
votes
1answer
4k views

Is it even possible to hack a television channel?

In spite of all the hacking news in the recent few years I never heard of someone who managed to hack a TV channel. What makes them so secure?
4
votes
1answer
79 views

Intercepting video in real time with arp spoofing

Is it possible to intercept video for example a netflix stream in real time if you are connected to the same LAN? Is it possible to know when the target computer pauses and plays the video so you know ...
1
vote
2answers
54 views

Resetting a hijacked router

If you reset a router that's been hijacked to factory defaults with the inbuilt reset button, will that take care of the problem?
1
vote
1answer
43 views

does the --nack command do what I think it does in reaver and why won't it work?

I have a problem with reaver. I try the --nack command reaver -i mon0 -b 00:01:02:03:04:05 -vv --nack --mac=00:BA:AD:BE:EF:6 for example. And I assume it will try a different PIN, even if it ...
0
votes
2answers
495 views

How do I map all active wireless devices inbound?

In any residential building, there is a multitude of WPA2-protected wireless access points. Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...
2
votes
1answer
206 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
5
votes
1answer
50 views

32-bit Radio Voice Encryption, is it really that secure? If so, how?

I'm a student studying Electrical and Computer Engineering and a ham radio operator (i.e. my knowledge of encryption is basic). More and more, police and local government radio has become encrypted, ...
1
vote
1answer
139 views

How secure are DECT and 5.8Ghz Digital Cordless home Phones?

Is it safe to assume someone with $1,000-$3,000 U.S. to throw around can purchase the expertise or equipment to tap someone's modern cordless phone via a vulnerability, or otherwise? I mean someone ...
1
vote
3answers
69 views

Modern SOHO router protection

Much like the entropy 'myth' of '1337' speak passwords compared to overall password length, it seems that multiple modern 'PC advice' articles on the web still suggest hiding SSIDs and as MAC ...
2
votes
1answer
94 views

Avoiding repeaters in radio-communication

Suppose a sender and a receiver communicate over some radio channel. Is there a way to prevent packets sent and received are not being repeated/forwarded by a MiTM? That is, when the agents are out of ...
-5
votes
2answers
140 views

If someone hacks my wifi connection what if any control do they have over radio waves in my house? [closed]

A couple questions on wifi security. If someone knows my wifi password (be it WEP or WPA) what kind of control do they have over radio waves? Can they emit radio waves from computers on my network? ...
1
vote
0answers
32 views

TLS in slow/unstable mobile/wireless networks [closed]

We have this rather old VPN tunnel software that is running in various wireless/mobile networks (from 2G mobile and upwards). It is currently running WTLS, as this software is from the old days when ...
2
votes
1answer
84 views

Point-to-point Microwave Security

I have found online multiple references to sniffing attacks on point-to-point microwave links, either by sitting in the side lobes or on a rooftop within the line-of-sight path. However, my search on ...
1
vote
2answers
64 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
1
vote
0answers
26 views

fakeauthentication is working when my belkin belkin router f7d2301 mac-address filtering enabled

Actually i have enabled mac-filtering in my belkin router and the security policy is none and the authentication is open authentication. Iam(attacker) using kali linux. when i done a fakeauth attack ...
1
vote
0answers
72 views

problem with mdk3

I have a problem in using mdk3 on kali. I want to DOS my AP with deauthenticate packets. I use the command: Mdk3 mon0 d <AP mac address> I am sure that the command is true. It is not working ...
3
votes
3answers
108 views

How dangerous is the remote Jeep Cherokee attack?

Recently two researchers working with a Wired Magazine reporter have demonstrated a serious vulnerability in UConnect, the software that powers the onboard entertainment systems of all Chrysler group ...
10
votes
2answers
129 views

Is my Windows phone protected from attacks that reveal list of ssids it knows about?

My goal is to see the SSIDs requested by mobile devices in my home. For example, my Windows phone knows about SSIDs called "coffee_shop", "planet_fitness" and "library". I have my phone set to ...
5
votes
6answers
2k views

Can one steal data using electric wire?

If I would like to keep my work secret in my computer and I don't use Internet, is it possible for a cracker to steal my data via electric wires or a wireless connection?
2
votes
1answer
346 views

Man in the middle attack, bridging wlan interface to virtual wired interface at0

I'm trying to execute a Man in the Middle attack on my mobile phone, I have two wireless cards, one inbuilt in the laptop, running AR9285 atheros drivers, the 2nd is an Alfa AWUS036NHA card with an ...
27
votes
1answer
6k views

Vehicle remote key security

How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key? How do car remote keys work? Do they use some kind of private/public keys, encryption? ...
4
votes
1answer
6k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
0answers
90 views

Decrypting WLAN (WPA2) Traffic - What kind of Antenna to use?

In a Penetration test after receiving the PSK of a WPA2 WLAN it's possible to decrypt the wireless traffic using airdecap-ng for example. This works well as long as one recorded the associated ...
1
vote
2answers
131 views

Is my password visible on an SSL/TLS connection across unprotected wireless?

If I am using an insecure wireless network that has no security protocol at all and trying to connect to my encrypted online banking website, can an attacker who is sniffing the wireless network sees ...
1
vote
1answer
197 views

If I have my neighbors wireless router password, can I access his data with a smartphone?

My neighbor gave me his wireless router password to use on my smartphone. Using this, can I access any of his accounts whether it's his bank account or Att/Direct TV account? I ask because I think ...
2
votes
1answer
887 views

Failure to capture any packets on wlan0 in monitor mode

I have read a lot of Q&As that have achieved success in packet captures of Wifi probe requests, which entails capturing IEEE802_11_RADIO (802.11 plus radiotap header) in monitor mode. But I find ...
2
votes
5answers
571 views

Is the newly adopted NFC technology going to be safe?

I got sent a link today talking about how the business card company "Moo" is implementing a chip into their cards that will allow NFC connections to do many things such as share contact info, open a ...
2
votes
1answer
178 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...