Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

0
votes
1answer
43 views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? Where would one get said tables or can they be ...
1
vote
1answer
23 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
1
vote
0answers
45 views

ASUS RT-AC68 login page is redirecting to some Amazonaws page?

Has my ASUS router been hacked or just glitchy? When I tried to login to 'router.asus.com' it would redirect to "[censored just in case].us-west-2.compute.amazonaws.com/find/device.html" and it said ...
4
votes
2answers
61 views

Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?

Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key? Is it ...
1
vote
2answers
137 views

Hashcat does 1-7 numeric characters on brute force attack when specifying 8

I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
1
vote
2answers
135 views

“Sniffing” Wifi Password? [duplicate]

I wonder if the follwing is possible: Assume you want to gain access to the AP "ap". Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
1
vote
2answers
37 views

How to use Aircrack-ng when knowing part of the password?

Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
0
votes
2answers
90 views

Is WPA(2)/AES or some derivative really perfectly secure?

It is said they are uncrackable for now, but my question is how much uncrackable are they? Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
1
vote
3answers
96 views

Which kind of Wifi is safe to use ?

I travel a lot, so I most of the time get Wifi from Hotel or Cafes. I payed attention to the fact that some Wifi does not have security password ! Here is a screenshot of the type of security I found ...
0
votes
0answers
33 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
1
vote
1answer
66 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
7
votes
0answers
106 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
0
votes
2answers
124 views

Is it possible for hackers hack my PC by creating fake AP that my PC probed

I heard that hackers can create fake AP that my PC is probing. As soon as my PC found the Fake AP, it will connect automatically. So To clarify, is it possible for hackers create the Fake AP that my ...
2
votes
1answer
663 views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
0answers
57 views

get a key HEX from wpa/wpa2 handshake [closed]

Can I get a key HEX from wpa/wpa2 handshake, or from the network in another way without knowing the passphrase? Example: Network SSID: linksys54gh WPA passphrase: radiustest Hexadecimal key: ...
2
votes
1answer
95 views

Why does WPA2 need a 4 way handshake?

If client and AP both have the Pairwise Master Key (PMK) available, why do we need a 4 way handshake again to derive some other key (PTK)? Why can't we use PMK for further security process?
0
votes
1answer
78 views

WPS and WPA2 connection methods

Do clients use WPS every time when they connect to a WPS-enabled AP? Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange? If the latter, it's possible for ...
0
votes
0answers
35 views

Usefulness of checking MS-CHAP-Challenge by TTLS Server

I've spotted what may be a "missed opportunity" in the EAP-TTLS specification for "Challenge"-based authentication protocols (for instance MS-CHAP-V2). The client initiates MS-CHAP-V2 by tunneling ...
1
vote
1answer
103 views

Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?

For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
0
votes
0answers
65 views

Is WPA practically less secure than WPA2 only if QoS is enabled?

I've been looking into attacks that are effective against WPA-TKIP but not WPA2-AES (both using PSK). I've found Vanhoef & Piessens's paper that builds off an attack by Beck & Tews and can be ...
0
votes
3answers
112 views

Can the packets of a wireless network be sniffed by a user who is not present in that network?

1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can he collect those packets? 2.If the user has ...
1
vote
2answers
740 views

can wpa2 wifi be hacked by capturing data on an evil twin?

If I copied the wifi essid and channel and did a de-authentication to the clients of the wifi that I want to hack and started a wifi of my own with the same essid, bssid and channel and I started ...
9
votes
5answers
628 views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
32
votes
3answers
6k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
0
votes
1answer
183 views

How to use multiple charsets in hashcat

I wanted to use a brute force attack on hashcat but WPA/WPA2 networks are 8-64 characters long and they have multiple possibilities of a password. I was wondering if there was a way to use multiple ...
-1
votes
1answer
100 views

WPA and WPA2 Help [closed]

I'm trying to hack my own WPA and WPA2 network for learning purposes. I used A 10 characters length password with only numbers, I know if I had to create the word list file it will be Huge, So I ...
0
votes
0answers
73 views

Fritz!Box default WPA2 security

I was wondering, how safe the default configuration of a Fritz!Box really is. By default, there is a 16 digit WPA2 key, which contains only numbers. My first though was, that bruteforcing is right ...
6
votes
4answers
7k views

Wifi penetration testing: Why aireplay-ng de-authentication does not work?

I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine. ...
1
vote
0answers
76 views

WPA2-Enterprise - unable to find a way around Lanner Electronics

I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
0
votes
1answer
430 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
-4
votes
1answer
415 views

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]

Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger. I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
1
vote
1answer
464 views

Decoding tunnel bytes in EAP-TLS or EAP-TTLS using Wireshark

I have a few pcaps of traffic for EAP-TTLS conversation, carried by RADIUS. I also have some being carried by EAPoL, but I think the answer to that case might be even less straightforward (though ...
3
votes
2answers
113 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
1
vote
0answers
49 views

Repeating “Type” field in EAP expanded NAK seems redundant?

I'm reviewing the EAP RFC 3748 and I've gotten to the bit about Expanded NAKs, and the examples given there seem to contradict my understanding of the generalised expanded format discussed later in ...
4
votes
1answer
5k views

What are the difference between WPA2-PSK and WPA2-EAP-PSK?

What are the differences between WPA2-PSK and WPA2 EAP-PSK ? What are the pro/const of use one configuration or the other ?
2
votes
1answer
101 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPSec. Is that more secure or these types of encryption have nothing ...
2
votes
1answer
436 views

Is there a way to identify the location of a person trying to intrude your wifi network? my wifi router is picking up his attempts

Aug 30 20:28:09 dropbear[6799]: Child connection from ::ffff:5.10.69.82:38463 Aug 30 20:28:11 dropbear[6799]: login attempt for nonexistent user from ::ffff:5.10.69.82:38463 Aug 30 20:28:12 ...
1
vote
3answers
321 views

Does WPA2 Enterprise protect against evasdropping from within the network?

At home, I have a simple ISP supplied router where I have set up a WPA2-PSK wireless network for our laptops and other devices. While I played around with Wireshark, I noticed that I could use my ...
5
votes
1answer
5k views

How exactly does 4-way handshake cracking work?

From my understanding this is how WPA2 works for home networks: PSK(Pre-Shared Key) is used to generate PMK(Pairwise Master Key), which is used together with ANonce(AP Nonce) to create PTK(Pairwise ...
1
vote
1answer
184 views

Does Ettercap exploit the Hole196 vulnerability?

If not, how is an ARP attack possible on a WPA2 secured network?
3
votes
1answer
1k views

Certificate validation with 802.1x PEAP

I recently learned about how WPA-PSK works. If I understand correctly, the 4-way handshake enables the protocol to ensure mutual possession of the PMK (and therefor, the PSK) without sending the ...
0
votes
1answer
357 views

WPA/WPA2 vulnerabilities [closed]

What are the vulnerabilities in WPA/WPA2? I know only WPS brute force. Are there any other vulnerabilities?
0
votes
1answer
611 views

Cowpatty handshakes vs Pyrit

At the moment I have a strange problem: I captured a pcap-file, and pyrit and aircrack tell me that it contains a valid handshake. But cowpatty complains about not having a full handshake, thus making ...
1
vote
0answers
60 views

Crack WPA2 with username [duplicate]

As far as I know you can crack WPA2-connections if you have the four-way-handshake. Then your program calculates the PMK/PTK and you get the key for the network. But what is with a WPA2-network where ...
4
votes
1answer
8k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
-1
votes
1answer
794 views

What are the disadvantages of WPA2? [closed]

What are the technical disadvantages with WPA2?
2
votes
1answer
2k views

WPA/WPA2 networks cracks methods

There are some software that states that can crack WPA networks, however that is not an easy task as the initialization code for WPA2 uses a four-way handshake to properly initialize all of the ...
1
vote
1answer
1k views

What to do with .hash files when cracking WPA2

So, I'd say I'm one level above n00b. I've gotten to the point where I have accomplished a WPA Handshake (and saved the output as xxx-01.cap). I have also downloaded these hash tables (if that is the ...
9
votes
1answer
1k views

Are networks using EAP-TLS affected by Heartbleed?

Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
-1
votes
2answers
1k views

If someone knows my wi-fi password, will he know what I am doing? [duplicate]

I just told my friend my Wi-Fi password, will he know what I am doing even though he does not connect to my home internet?