Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

12
votes
6answers
2k views

Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?

So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
0
votes
1answer
25 views

aircrack-ng fed with crunch taking ages

I'm trying aircrack-ng attack like below: crunch 1 2 -f /usr/local/Cellar/crunch/3.6/share/charset.lst mixalpha-numeric|aircrack-ng -b 90:F6:52:80:B9:E2 -w - ~/DumpLog* ⋮ Crunch will now generate the ...
1
vote
1answer
622 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
1answer
38 views

What is the difference between capture traffic from inside and outside of my network?

I'm thinking to use Wireshark tool to packet capture in my Wireless network. I read something that tells I can capture from inside or outside of my network, just making my wifi board working in ...
11
votes
3answers
4k views

What is the purpose of changing the default SSID?

Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
1
vote
2answers
44 views

Does DirectAccess protect non corporate traffic on public wifi?

If I were connected to DirectAccess over public wifi, does this provide any measure of security for non-corporate resources, such as online banking? Would I be better served by going through ...
0
votes
2answers
67 views

Is WPA-PSK AES safer than WPA-PSK TKIP-AES?

On this forum thread I see (translated): On Telecom Router we have those wifi encryption modes Disabled-OpenNet - WEP (128 bit) -> WEP (unsafe breakable in some minutes) - WPA-PSK TKIP 256 bit ...
4
votes
1answer
577 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
3
votes
1answer
26 views

missing ESSID from aircrack-ng

I'm using Mac OS X and I was able to sniff packet from my homeNetwork (in order to learn more about how things goes on). I'm sending a deauth command to all my devices to disconnect them and then ...
10
votes
7answers
21k views

Is a longer WiFi password more secure?

Today I had to type the same password to connect to a WPA2-secured WiFi network several times, and got really annoyed with the length of the password. Especially since it is just a phrase repeated ...
2
votes
1answer
50 views

Details of WPA2

Finding explanations about the various aspects of WPA2 suffers from inconsistent terminology and a general lack of clarity on what purpose some protocol/standard serves and how it relates to others. ...
-2
votes
2answers
5k views

How secure are WPA2 keys? [duplicate]

Possible Duplicate: Are WPA2 connections with a shared key secure? I have a WPA2-Persinal security type and encryption AES, If I use wireshark can I see what apckets other computers send to ...
36
votes
0answers
874 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
1
vote
1answer
81 views

MITM attack on WPA-PSK using fake AP: Can the password be intercepted from normal Windows AP-logon mechanism?

I have already tested how to do a MITM attack, using a fake AP to intercept the WPA-PSK, by presenting the user to a vendor (e.g. Linksys) logon page, before routing network traffic through eth0. ...
4
votes
3answers
107 views

Risks of giving a hacker my WPA key for my router?

What are the risks when someone (maybe a hacker), that through Social Engineering gets the WPA or WEP key of my router and (obviously) can navigate through internet. At this point, what can this ...
8
votes
3answers
39k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
4
votes
1answer
4k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
9
votes
1answer
14k views

What are the difference between WPA2-PSK and WPA2-EAP-PSK?

What are the differences between WPA2-PSK and WPA2 EAP-PSK ? What are the pro/const of use one configuration or the other ?
0
votes
1answer
48 views

Plaintext DNS traffic in a WPA2 session?

The question I have is, in WPA2 session between the AP and client are DNS requests sent plain text? Trying to wrap my head around the latest glibc exploit. Thank you Ted
1
vote
1answer
131 views

How to optimize cracking speed with Reaver

When testing network security with Reaver in order to find out WPS, what parameters do you usually use with respect to cracking speed? I've chosen for TP-LINK Archer C20i AC750 Dual Band a delay of ...
2
votes
2answers
3k views

WPA/WPA2 networks cracks methods

There are some software that states that can crack WPA networks, however that is not an easy task as the initialization code for WPA2 uses a four-way handshake to properly initialize all of the ...
2
votes
1answer
46 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a ...
0
votes
0answers
47 views

Difference between WPA, WPA2 and mixed mode on packets level

What is the difference between wpa, wpa2 and mixed mode, particulary how 4-way handshake packets look-like for every type? Is there any good lecture about it with packets examples? Above question ...
4
votes
1answer
125 views

Evil Twin attack: How to make client send WPA2-PSK password when asked for AP-password? [closed]

How can an Evil Twin attack be set up, so that the client will be prompted for a password and send it in plain text? Is the above even possible? I have already set up the fake AP, but it must be ...
1
vote
1answer
80 views

How can systems recognize different wifi AP with the same SSID and MAC address

I'm testing, for studying purpose, an evil twin attack. In my scenario I have both the rogue AP made by my laptop and the real AP with the same SSID and MAC address, but with different security ...
0
votes
1answer
240 views

How to brute-force WPA-2 password of specific set of characters using oclHashcat?

I want to test oclHashcat on a WPA-2 PSK password of length 8 containing only characters in the set {a-z, A-Z, 0-9}. To do this I have already captured the handshake in a .cap file and converted it ...
1
vote
2answers
106 views

How does WPA2-PSK prevent evil twin password phishing?

Let's say we have a WPA2-PSK secured AP and there are several clients like smartphones and notebooks that automatically connect to it. Now if someone was to create another AP that looked completely ...
0
votes
1answer
64 views

Why isn't WPA2 more secure?

Follow-up from this question. I just learned that all one needs to decrypt WPA2 traffic is the network key. So for example if I go to a coffee shop and they have the key on the wall I can listen to ...
3
votes
1answer
152 views

MITM over WPA2 (e.g. with ettercap)

I've read on a few sites that it's possible to conduct MITM attacks over WPA2-secured connections. So for example I could replace the content of a site a user tries to access over HTTP. Is this true? ...
0
votes
3answers
126 views

Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?

I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet. Also, what if the router ...
4
votes
2answers
540 views

ASUS RT-AC68 login page is redirecting to some Amazonaws page?

Has my ASUS router been hacked or just glitchy? When I tried to login to 'router.asus.com' it would redirect to "[censored just in case].us-west-2.compute.amazonaws.com/find/device.html" and it said ...
2
votes
1answer
114 views

What is the difference between key mechanism in wep and wpa

I haven't found the resources explaining about exact authentication mechanism about wpa-psk in the internet. finally i found securitytube videos i found one video regarding the wpa-psk concepts.in ...
0
votes
1answer
672 views

Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk

I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password I am using aircrack-ng on ubuntu Is there any possible way to calculate the maximum amount of ...
7
votes
2answers
410 views

If WPA2-PSK is insecure, what other options do home users have?

from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
1
vote
1answer
77 views

Scapy WPA2 packet forging

Can I use scapy to forge custom packets on WPA2 network? Can I even pack the IEEE 802.11 headers?
1
vote
2answers
101 views

How to forge custom IEEE 802.11 packets?

I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
0
votes
0answers
2k views

reaver - [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null))

I am familiar with dict-password cracking but I recently moved on to reaver. When I run reaver, it pops up with an error [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null)). I ...
4
votes
1answer
134 views

Wi-Fi asks to accept (self-signed) certificate – What is it used for?

When I tried to connect to my University's Wi-Fi for the first time, it asked me to accept a (probably self-signed) certificate. Luckily they published the fingerprint so I was sure it is safe to ...
9
votes
5answers
68k views

Bruteforce on 10 characters length WPA2 password

I'm trying to hack my own WPA2 network for learning purposes. I have the *.cap file generated by aircrack-ng tools after a WPA handshake. I've tested by including my own password and a bunch of ...
5
votes
1answer
9k views

How does Dumper program get default WPS without bruteforcing them?

Today I tried a program called Dumper and the program showed me default WPS of all of my neighbor access points without bruteforcing them, see screenshot below: I had to cover BSSID and ESSID of the ...
1
vote
2answers
641 views

What would be the most efficient way of brute forcing a wifi key [duplicate]

I was wondering how can a brut force of my wifi be prevented so I want to know the best technique that can be used to brute force it first, so protection isn't my question. My question is: What brute ...
2
votes
1answer
242 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
4
votes
5answers
6k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
3
votes
1answer
130 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
-1
votes
3answers
830 views

The best papers on WPA/WPA2 [closed]

I have to write a term project about WPA/WPA2: I should find and read five articles and write a sort of summary of the technology citing those articles. And no, the professor will not help find ...
0
votes
1answer
256 views

Which method of WPA2 enterprise is more secure: TTLS or PEAP [closed]

Say we have two WPA2 enterprise setups using a RADIUS server. If both implementations use MSCHAPV2 and the same credentials. Which of the two would be more secure and how are these two implementations ...
1
vote
2answers
1k views

What is “anonymous identity” in enterprise WPA?

When connecting to an enterprise WPA protected network, I have the option the add an "anonymous identity" (see related screenshot). I don't understand what's the point though. Who get to see this ...
2
votes
2answers
1k views

Decoding tunnel bytes in EAP-TLS or EAP-TTLS using Wireshark

I have a few pcaps of traffic for EAP-TTLS conversation, carried by RADIUS. I also have some being carried by EAPoL, but I think the answer to that case might be even less straightforward (though ...
4
votes
2answers
20k views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
6
votes
5answers
577 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPsec. Is that more secure or do these types of encryption have ...