Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

0
votes
0answers
9 views

Is there a way to identify the location of a person trying to intrude your wifi network? my wifi router is picking up his attempts

Aug 30 20:28:09 dropbear[6799]: Child connection from ::ffff:5.10.69.82:38463 Aug 30 20:28:11 dropbear[6799]: login attempt for nonexistent user from ::ffff:5.10.69.82:38463 Aug 30 20:28:12 ...
1
vote
2answers
58 views

Does WPA2 Enterprise protect against evasdropping from within the network?

At home, I have a simple ISP supplied router where I have set up a WPA2-PSK wireless network for our laptops and other devices. While I played around with Wireshark, I noticed that I could use my ...
6
votes
4answers
14k views

Bruteforce on 10 characters length WPA2 password

I'm trying to hack my own WPA2 network for learning purposes. I have the *.cap file generated by aircrack-ng tools after a WPA handshake. I've tested by including my own password and a bunch of ...
3
votes
1answer
71 views

How exactly does 4-way handshake cracking work?

From my understanding this is how WPA2 works for home networks: PSK(Pre-Shared Key) is used to generate PMK(Pairwise Master Key), which is used together with ANonce(AP Nonce) to create PTK(Pairwise ...
2
votes
1answer
258 views

2 AP (TP-LINK) - bridge mode - security issues

I connect two TP-LINK APs (TL-WA901ND) together over bridge-mode. It's all working fine but there is no option to set up some wifi-security (WPA/WPA2). Do I need wifi-security over bridge-mode? Any ...
2
votes
1answer
126 views

What are the security implications of pairwise master key caching in Wireless Networks?

I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
0
votes
1answer
37 views

Does Ettercap exploit the Hole196 vulnerability?

If not, how is an ARP attack possible on a WPA2 secured network?
1
vote
1answer
74 views

Certificate validation with 802.1x PEAP

I recently learned about how WPA-PSK works. If I understand correctly, the 4-way handshake enables the protocol to ensure mutual possession of the PMK (and therefor, the PSK) without sending the ...
0
votes
1answer
78 views

Cowpatty handshakes vs Pyrit

At the moment I have a strange problem: I captured a pcap-file, and pyrit and aircrack tell me that it contains a valid handshake. But cowpatty complains about not having a full handshake, thus making ...
0
votes
1answer
136 views

WPA/WPA2 vulnerabilities [closed]

What are the vulnerabilities in WPA/WPA2? I know only WPS brute force. Are there any other vulnerabilities?
1
vote
0answers
59 views

Crack WPA2 with username [duplicate]

As far as I know you can crack WPA2-connections if you have the four-way-handshake. Then your program calculates the PMK/PTK and you get the key for the network. But what is with a WPA2-network where ...
6
votes
2answers
1k views

Would an unnecessarily long password degrade performance of a WPA2 wireless network?

My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ ...
2
votes
1answer
122 views

Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?

In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
6
votes
6answers
16k views

Recommend Length for Wi-FI PSK?

I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
14
votes
3answers
5k views

Can someone get my WPA2 password with honeypots?

Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
3
votes
1answer
331 views

WiFi Direct/WPS key question

So far, I haven't seen any PoC or real-world attacks against WiFi Direct, but I see the potential because it relies on WiFi Protected Setup (WPS) for establishing the connection. Tools like Reaver ...
2
votes
1answer
535 views

No Handshake from Airodump

I'm struggling to get a handshake from my router when using airodump. I'm running this from Kali Linux live CD. airmon-ng shows my wireless card is an Atheros AR9462 using the ath9k - [phy0] driver. ...
-1
votes
1answer
207 views

What are the disadvantages of WPA2? [closed]

What are the technical disadvantages with WPA2?
2
votes
1answer
364 views

WPA/WPA2 networks cracks methods

There are some software that states that can crack WPA networks, however that is not an easy task as the initialization code for WPA2 uses a four-way handshake to properly initialize all of the ...
1
vote
1answer
429 views

What to do with .hash files when cracking WPA2

So, I'd say I'm one level above n00b. I've gotten to the point where I have accomplished a WPA Handshake (and saved the output as xxx-01.cap). I have also downloaded these hash tables (if that is the ...
9
votes
1answer
1k views

Are networks using EAP-TLS affected by Heartbleed?

Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
0
votes
2answers
382 views

If someone knows my wi-fi password, will he know what I am doing? [duplicate]

I just told my friend my Wi-Fi password, will he know what I am doing even though he does not connect to my home internet?
0
votes
3answers
837 views

Reaver returns different WPS PSK and AP SSID each time it finds correct PIN

I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
1
vote
0answers
181 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
-1
votes
3answers
130 views

WEP > WPA? Why? [duplicate]

What are some reasons (if any) one would choose WEP over WPA? Clearly, WPA offers more security, but when can WEP be a good or even better choice?
3
votes
1answer
112 views

WPA2 enterprise credentials involved in encryption?

Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
11
votes
2answers
835 views

What is the purpose of changing the default SSID?

Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
0
votes
1answer
312 views

WPA/PSK Dictionaries

So i have been reading some articles on WPA/PSK encryption, And one said that the hash is calculated like this: Key = PBKDF2(passphrase, ssid, 4096, 256) Where PBKDF2 is a standardized method ...
1
vote
3answers
257 views

Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?

Mobile devices like smartphones and tablets have the feature to autoconnect to wireless networks of known name. The same is with laptops and other hardware using WPA2. Is it possible to: a. Obtain ...
10
votes
4answers
7k views

Why is WPA Enterprise more secure than WPA2?

In personal mode WPA2 is more secure than WPA. However, I have read that WPA Enterprise provides stronger security than WPA2 and I am unsure exactly how this is achieved.
5
votes
3answers
17k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
2
votes
1answer
2k views

Why is a CA certificate required for EAP-TLS clients?

When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate. It's ...
2
votes
4answers
912 views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
6
votes
2answers
3k views

WPA2 Enterprise AES encryption key size?

I have recently set up a RADIUS server with EAP for my wireless router, however, I have some questions about the key size and how WPA2 enterprise (AES) works in general. I have read that in ...
2
votes
1answer
2k views

Which part of the eapol packets contain WPA password Hash?

I have captured wifi traffic from a WPA network using Wireshark. I filtered the results for "eapol" packets and noted in the info column there are message type 3 and type 1. I believe this is two ...
5
votes
2answers
628 views

Does WPA2 Enterprise mitigate evil twin attacks?

One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
6
votes
1answer
874 views

Are strong WPA2 passwords “good enough” for WiFi security?

I'm currently using WPA2-PSK with CCMP on my home WiFi network for encryption and security. I was a big fan of MAC filtering, until I realized that MAC addresses are publicly sniffable in the 802.11 ...
3
votes
2answers
159 views

How are WPA Keys stored on a router?

Should the router only store a hash of my encryption key or is it stored as plaintext? I believe (but not certain) that the WPA key is itself an encryption key, buy shouldn't that be encrypted like ...
4
votes
1answer
4k views

Is brute-forcing the only way to crack WPA?

I don't know much about how WPA algorithms work internally. Is brute-forcing an AP the only way to crack WPA? (or to get associated with AP) Another question is about Reaver-WPS, what if an access ...
3
votes
2answers
145 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
2
votes
2answers
113 views

Is exposing the psk in /etc/network/interfaces a security risk?

I have an application that generates the /etc/network/interfaces file for connecting to the users wifi network. This application uses wpa_passphrase to generate the psk, which is then copied into the ...
0
votes
2answers
449 views

Is there a way to configure WPA2-PSK to provide Forward Secrecy?

Is there a way to secure an wireless connection against a decryption attack where the PSK is known (E.G. Airdecap-NG)? Is it possible to configure Forward Secrecy on 802.11 Wireless Connections?
-5
votes
2answers
3k views

I know the WPA-PSK secured wifi password, If I use the wifi, will I be caught? [closed]

I hacked the WPA-PSK secured wifi password from one of the wifi network. If they track their DHCP Client IP, will I be caught? If yes, how? By my computer name or IP address or MAC Address?
4
votes
3answers
2k views

Is it possible for someone to figure out my WIFI password by following me?

Say someone drives up and parks in front of my house. They get a list of all SSIDs they can pick up. My phone is configured to save the WPA2 password and automatically login when the SSID is in range. ...
3
votes
1answer
2k views

Practical attacks against WPA2

Maybe a duplicate: Bruteforce on 10 characters length WPA2 password So I am trying to get into home network security for the fun of it. More concretely, I am trying to reproduce the scenario of ...
0
votes
1answer
467 views

Preferred access list (WPA2 rogue AP)

For the following scenario in which victim has a WIFI access point at home (AP-HOME) through which he surfs the net and a client (CLI1) connected to "AP-HOME" via WPA2. The victim also has "FREE-AP" ...
1
vote
3answers
772 views

wpa2-psk + wireless isolation = secure connection?

from what I've read: If I am on a wireless network without encryption, any other computer connected to that same network could easily (with right tools & knowledge) intercept any traffic I ...
4
votes
1answer
312 views

WPA2 audit tool

For the purposes of my own research, I have a very modest budget to set up a modest WPA2 brute-forcer supported by GPU(s). I've done some homework: Brute-Force GPU Password Crackers How to setup ...
6
votes
3answers
3k views

How do WPA/WPA2 cracking programs know when the PMK/PTK is correct?

I'm doing some pen-testing on my home wlan with aircrack-ng and it got me wondering how programs like these(eg. aircrack-ng, cowPatty, pyrit etc) really work. Specially, when performing a ...
5
votes
3answers
253 views

Security difference in wardriving open network versus monitoring traffic on a network to which I am authenticated

I have been listening to the CBT nuggets on comptia security+ and there were a few sections on wireless security. A question that occurred to me was: if I am authorized to use a wireless network, and ...