Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

0
votes
1answer
37 views

Are there any pen testing tools/methods for wpa2 networks that don't require using an adapter that supports monitor mode? [on hold]

I really enjoy reading and researching about networking and pentesting. Recently I heard from a friend that there are ways that can be used to get into wireless networks without needing an adapter ...
2
votes
2answers
207 views

If password is super long, your wpa / wpa2-psk is safe?

sorry im kinda clueless with this stuff... I heard if you set your wifi password to more than 10 or so digits (and make it complicated), then your wpa / wpa2 psk would be safe. Is that true? If not, ...
2
votes
2answers
38 views

WPA with PSK and with Radius Server

In case of WPA2 using the Radius server, every client gets its own username and password. But what is the case in the WPA2 using a PSK without the authenticating server. In this case also we have a 4 ...
1
vote
1answer
53 views

Why can't I have WPA handshake on aircrack? [closed]

I know this might seems general question to be googled first and I have tried. I have successfully de-authenticated the client or clients multiple times but I didn't get the message of WPA handshake ...
3
votes
1answer
82 views

Is it possible to steal WPA2 key using a rogue AP?

Without using a 'fishing' homepage explicitly asking for the user to retype the WPA key. Is it possible to catch the WPA key wich is sent to a rogue AP in the initial connection phase ?
1
vote
1answer
226 views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? Where would one get said tables or can they be ...
2
votes
1answer
57 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
1
vote
0answers
98 views

ASUS RT-AC68 login page is redirecting to some Amazonaws page?

Has my ASUS router been hacked or just glitchy? When I tried to login to 'router.asus.com' it would redirect to "[censored just in case].us-west-2.compute.amazonaws.com/find/device.html" and it said ...
4
votes
2answers
91 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
1
vote
2answers
179 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
2
votes
2answers
174 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
1
vote
2answers
51 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
0
votes
2answers
127 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
1
vote
3answers
103 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
5
votes
2answers
390 views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
0
votes
0answers
44 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
1
vote
1answer
73 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
11
votes
0answers
350 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
0
votes
2answers
173 views

Is it possible for hackers hack my PC by creating fake AP that my PC probed

I heard that hackers can create fake AP that my PC is probing. As soon as my PC found the Fake AP, it will connect automatically. So To clarify, is it possible for hackers create the Fake AP that my ...
2
votes
1answer
2k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
0answers
78 views

get a key HEX from wpa/wpa2 handshake [closed]

Can I get a key HEX from wpa/wpa2 handshake, or from the network in another way without knowing the passphrase? Example: Network SSID: linksys54gh WPA passphrase: radiustest Hexadecimal key: ...
2
votes
1answer
115 views

Why does WPA2 need a 4 way handshake?

If client and AP both have the Pairwise Master Key (PMK) available, why do we need a 4 way handshake again to derive some other key (PTK)? Why can't we use PMK for further security process?
0
votes
1answer
100 views

WPS and WPA2 connection methods

Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange? If the latter, it's possible for ...
0
votes
0answers
38 views

Usefulness of checking MS-CHAP-Challenge by TTLS Server

I've spotted what may be a "missed opportunity" in the EAP-TTLS specification for "Challenge"-based authentication protocols (for instance MS-CHAP-V2). The client initiates MS-CHAP-V2 by tunneling ...
2
votes
1answer
123 views

Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?

For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
0
votes
0answers
76 views

Is WPA practically less secure than WPA2 only if QoS is enabled?

I've been looking into attacks that are effective against WPA-TKIP but not WPA2-AES (both using PSK). I've found Vanhoef & Piessens's paper that builds off an attack by Beck & Tews and can be ...
0
votes
3answers
116 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
1
vote
2answers
1k views

can wpa2 wifi be hacked by capturing data on an evil twin?

If I copied the wifi essid and channel and did a de-authentication to the clients of the wifi that I want to hack and started a wifi of my own with the same essid, bssid and channel and I started ...
9
votes
5answers
825 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
34
votes
3answers
9k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
0
votes
1answer
293 views

How to use multiple charsets in hashcat

I wanted to use a brute force attack on hashcat but WPA/WPA2 networks are 8-64 characters long and they have multiple possibilities of a password. I was wondering if there was a way to use multiple ...
-1
votes
1answer
113 views

WPA and WPA2 Help [closed]

I'm trying to hack my own WPA and WPA2 network for learning purposes. I used A 10 characters length password with only numbers, I know if I had to create the word list file it will be Huge, So I ...
0
votes
1answer
101 views

Fritz!Box default WPA2 security

I was wondering, how safe the default configuration of a Fritz!Box really is. By default, there is a 16 digit WPA2 key, which contains only numbers. My first though was, that bruteforcing is right ...
6
votes
4answers
9k views

Wifi penetration testing: Why aireplay-ng de-authentication does not work?

I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine. ...
1
vote
0answers
88 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
0
votes
1answer
486 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
-4
votes
1answer
491 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
1
vote
1answer
589 views

Decoding tunnel bytes in EAP-TLS or EAP-TTLS using Wireshark

I have a few pcaps of traffic for EAP-TTLS conversation, carried by RADIUS. I also have some being carried by EAPoL, but I think the answer to that case might be even less straightforward (though ...
3
votes
2answers
123 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
1
vote
0answers
52 views

Repeating “Type” field in EAP expanded NAK seems redundant?

I'm reviewing the EAP RFC 3748 and I've gotten to the bit about Expanded NAKs, and the examples given there seem to contradict my understanding of the generalised expanded format discussed later in ...
5
votes
1answer
6k views

What are the difference between WPA2-PSK and WPA2-EAP-PSK?

What are the differences between WPA2-PSK and WPA2 EAP-PSK ? What are the pro/const of use one configuration or the other ?
2
votes
1answer
107 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPSec. Is that more secure or these types of encryption have nothing ...
2
votes
1answer
453 views

Is there a way to identify the location of a person trying to intrude your wifi network? my wifi router is picking up his attempts

Aug 30 20:28:09 dropbear[6799]: Child connection from ::ffff:5.10.69.82:38463 Aug 30 20:28:11 dropbear[6799]: login attempt for nonexistent user from ::ffff:5.10.69.82:38463 Aug 30 20:28:12 ...
1
vote
3answers
366 views

Does WPA2 Enterprise protect against evasdropping from within the network?

At home, I have a simple ISP supplied router where I have set up a WPA2-PSK wireless network for our laptops and other devices. While I played around with Wireshark, I noticed that I could use my ...
6
votes
1answer
6k views

How exactly does 4-way handshake cracking work?

From my understanding this is how WPA2 works for home networks: PSK(Pre-Shared Key) is used to generate PMK(Pairwise Master Key), which is used together with ANonce(AP Nonce) to create PTK(Pairwise ...
1
vote
1answer
214 views

Does Ettercap exploit the Hole196 vulnerability?

If not, how is an ARP attack possible on a WPA2 secured network?
3
votes
1answer
2k views

Certificate validation with 802.1x PEAP

I recently learned about how WPA-PSK works. If I understand correctly, the 4-way handshake enables the protocol to ensure mutual possession of the PMK (and therefor, the PSK) without sending the ...
0
votes
1answer
406 views

WPA/WPA2 vulnerabilities [closed]

What are the vulnerabilities in WPA/WPA2? I know only WPS brute force. Are there any other vulnerabilities?
0
votes
1answer
668 views

Cowpatty handshakes vs Pyrit

At the moment I have a strange problem: I captured a pcap-file, and pyrit and aircrack tell me that it contains a valid handshake. But cowpatty complains about not having a full handshake, thus making ...
1
vote
0answers
61 views

Crack WPA2 with username [duplicate]

As far as I know you can crack WPA2-connections if you have the four-way-handshake. Then your program calculates the PMK/PTK and you get the key for the network. But what is with a WPA2-network where ...