Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

0
votes
0answers
13 views

Can a third party passively read transmissions if WEP / WPA / WPA2 key is known?

If I connect to a WiFi network sporting either WEP, WPA or WPA2 encryption, can someone other decipher my communication he passively received if he knows the network's passphrase?
0
votes
0answers
24 views

Authentication in WPA from a user's perspective

I have read several articles that discuss the differences between WEP and WPA but I haven't seen an answer to my question, which is : How is the authentication used in WPA different from that used ...
2
votes
2answers
115 views

Ethical Hacking: Cracking my personal wireless network

I am teaching myself ethical hacking. Now, I am attempting to crack the password of my Verizon FIOS Router at home. Using Kali Linux 2 based on this website. Steps So Far On Kali Linux typed ...
-1
votes
0answers
53 views

Wash and Reaver issues in kali

I don't know if this is a silly question, but here it goes. I am trying to get my hotspot's password with reaver on Kali 1.0. Monitor mode is on, I see the target network on airodump, But wash isn't ...
1
vote
0answers
20 views

How does deauth protection (IEEE_802.11w-2009) work?

I read a Wikipedia article on IEEE_802.11w-2009 and I wonder how does it work with WPA2. In other words, how do I turn it on in my Linux kernel? If I enable it both in it and in an OpenWRT router, am ...
3
votes
1answer
73 views

How are WPA2 passwords encoded?

I'm trying to figure out a good John The Ripper rule for WPA2 that won't waste time testing impossible passwords. Thus the question - are there any limits on what's allowed in a WPA2 password? Can it ...
1
vote
1answer
55 views

What is the difference between capture traffic from inside and outside of my network?

I'm thinking to use Wireshark tool to packet capture in my Wireless network. I read something that tells I can capture from inside or outside of my network, just making my wifi board working in "...
0
votes
2answers
160 views

Is WPA-PSK AES safer than WPA-PSK TKIP-AES?

On this forum thread I see (translated): On Telecom Router we have those wifi encryption modes Disabled-OpenNet - WEP (128 bit) -> WEP (unsafe breakable in some minutes) - WPA-PSK TKIP 256 bit -...
3
votes
1answer
31 views

missing ESSID from aircrack-ng

I'm using Mac OS X and I was able to sniff packet from my homeNetwork (in order to learn more about how things goes on). I'm sending a deauth command to all my devices to disconnect them and then ...
0
votes
1answer
42 views

aircrack-ng fed with crunch taking ages

I'm trying aircrack-ng attack like below: crunch 1 2 -f /usr/local/Cellar/crunch/3.6/share/charset.lst mixalpha-numeric|aircrack-ng -b 90:F6:52:80:B9:E2 -w - ~/DumpLog* ⋮ Crunch will now generate the ...
2
votes
1answer
67 views

Details of WPA2

Finding explanations about the various aspects of WPA2 suffers from inconsistent terminology and a general lack of clarity on what purpose some protocol/standard serves and how it relates to others. ...
1
vote
2answers
63 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
1
vote
1answer
106 views

MITM attack on WPA-PSK using fake AP: Can the password be intercepted from normal Windows AP-logon mechanism?

I have already tested how to do a MITM attack, using a fake AP to intercept the WPA-PSK, by presenting the user to a vendor (e.g. Linksys) logon page, before routing network traffic through eth0. ...
4
votes
3answers
115 views

Risks of giving a hacker my WPA key for my router?

What are the risks when someone (maybe a hacker), that through Social Engineering gets the WPA or WEP key of my router and (obviously) can navigate through internet. At this point, what can this ...
0
votes
1answer
56 views

Plaintext DNS traffic in a WPA2 session?

The question I have is, in WPA2 session between the AP and client are DNS requests sent plain text? Trying to wrap my head around the latest glibc exploit. Thank you Ted
1
vote
1answer
181 views

How to optimize cracking speed with Reaver

When testing network security with Reaver in order to find out WPS, what parameters do you usually use with respect to cracking speed? I've chosen for TP-LINK Archer C20i AC750 Dual Band a delay of ...
2
votes
1answer
51 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a button,...
0
votes
0answers
56 views

Difference between WPA, WPA2 and mixed mode on packets level

What is the difference between wpa, wpa2 and mixed mode, particulary how 4-way handshake packets look-like for every type? Is there any good lecture about it with packets examples? Above question ...
4
votes
1answer
158 views

Evil Twin attack: How to make client send WPA2-PSK password when asked for AP-password? [closed]

How can an Evil Twin attack be set up, so that the client will be prompted for a password and send it in plain text? Is the above even possible? I have already set up the fake AP, but it must be ...
1
vote
1answer
92 views

How can systems recognize different wifi AP with the same SSID and MAC address

I'm testing, for studying purpose, an evil twin attack. In my scenario I have both the rogue AP made by my laptop and the real AP with the same SSID and MAC address, but with different security ...
0
votes
1answer
342 views

How to brute-force WPA-2 password of specific set of characters using oclHashcat?

I want to test oclHashcat on a WPA-2 PSK password of length 8 containing only characters in the set {a-z, A-Z, 0-9}. To do this I have already captured the handshake in a .cap file and converted it ...
0
votes
1answer
68 views

Why isn't WPA2 more secure?

Follow-up from this question. I just learned that all one needs to decrypt WPA2 traffic is the network key. So for example if I go to a coffee shop and they have the key on the wall I can listen to ...
1
vote
2answers
129 views

How does WPA2-PSK prevent evil twin password phishing?

Let's say we have a WPA2-PSK secured AP and there are several clients like smartphones and notebooks that automatically connect to it. Now if someone was to create another AP that looked completely ...
3
votes
1answer
195 views

MITM over WPA2 (e.g. with ettercap)

I've read on a few sites that it's possible to conduct MITM attacks over WPA2-secured connections. So for example I could replace the content of a site a user tries to access over HTTP. Is this true? ...
0
votes
3answers
137 views

Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?

I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet. Also, what if the router ...
2
votes
1answer
133 views

What is the difference between key mechanism in wep and wpa

I haven't found the resources explaining about exact authentication mechanism about wpa-psk in the internet. finally i found securitytube videos i found one video regarding the wpa-psk concepts.in ...
7
votes
2answers
485 views

If WPA2-PSK is insecure, what other options do home users have?

from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
1
vote
1answer
91 views

Scapy WPA2 packet forging

Can I use scapy to forge custom packets on WPA2 network? Can I even pack the IEEE 802.11 headers?
1
vote
2answers
141 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
0
votes
0answers
2k views

reaver - [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null))

I am familiar with dict-password cracking but I recently moved on to reaver. When I run reaver, it pops up with an error [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null)). I ...
4
votes
1answer
151 views

Wi-Fi asks to accept (self-signed) certificate – What is it used for?

When I tried to connect to my University's Wi-Fi for the first time, it asked me to accept a (probably self-signed) certificate. Luckily they published the fingerprint so I was sure it is safe to ...
1
vote
2answers
668 views

What would be the most efficient way of brute forcing a wifi key [duplicate]

I was wondering how can a brut force of my wifi be prevented so I want to know the best technique that can be used to brute force it first, so protection isn't my question. My question is: What brute ...
2
votes
1answer
267 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
0
votes
1answer
392 views

Which method of WPA2 enterprise is more secure: TTLS or PEAP [closed]

Say we have two WPA2 enterprise setups using a RADIUS server. If both implementations use MSCHAPV2 and the same credentials. Which of the two would be more secure and how are these two implementations ...
1
vote
2answers
2k views

What is “anonymous identity” in enterprise WPA?

When connecting to an enterprise WPA protected network, I have the option the add an "anonymous identity" (see related screenshot). I don't understand what's the point though. Who get to see this ...
1
vote
1answer
52 views

Enabled WPS methods

I would like to know if there are tools available to identify what WPS method is actually enabled on an AP? I would like to know also if there is a way by looking at packets to know which WPS method ...
1
vote
1answer
59 views

Are there any pen testing tools/methods for wpa2 networks that don't require using an adapter that supports monitor mode? [closed]

I really enjoy reading and researching about networking and pentesting. Recently I heard from a friend that there are ways that can be used to get into wireless networks without needing an adapter ...
2
votes
2answers
1k views

If password is super long, your wpa / wpa2-psk is safe?

sorry im kinda clueless with this stuff... I heard if you set your wifi password to more than 10 or so digits (and make it complicated), then your wpa / wpa2 psk would be safe. Is that true? If not, ...
2
votes
2answers
118 views

WPA with PSK and with Radius Server

In case of WPA2 using the Radius server, every client gets its own username and password. But what is the case in the WPA2 using a PSK without the authenticating server. In this case also we have a 4 ...
1
vote
1answer
114 views

Why can't I have WPA handshake on aircrack? [closed]

I know this might seems general question to be googled first and I have tried. I have successfully de-authenticated the client or clients multiple times but I didn't get the message of WPA handshake ...
5
votes
1answer
421 views

Is it possible to steal WPA2 key using a rogue AP?

Without using a 'fishing' homepage explicitly asking for the user to retype the WPA key. Is it possible to catch the WPA key wich is sent to a rogue AP in the initial connection phase ?
5
votes
1answer
5k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
3
votes
1answer
144 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
4
votes
2answers
1k views

ASUS RT-AC68 login page is redirecting to some Amazonaws page?

Has my ASUS router been hacked or just glitchy? When I tried to login to 'router.asus.com' it would redirect to "[censored just in case].us-west-2.compute.amazonaws.com/find/device.html" and it said ...
5
votes
2answers
211 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
1
vote
2answers
487 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
2
votes
2answers
247 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
1
vote
2answers
93 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
0
votes
2answers
388 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
1
vote
3answers
120 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...