Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.

learn more… | top users | synonyms

26
votes
4answers
8k views

Are WPA2 connections with a shared key secure?

This is something that has been bugging me for quite some time: when I have a wifi access point with WPA2 encryption and I give out the key, how secure are the connections? With WEP you could easily ...
7
votes
3answers
36k views

Four-way Handshake in WPA-Personal (WPA-PSK)

Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
13
votes
3answers
7k views

How does FaceNiff work?

FaceNiff is an Android app that sniffs Facebook session ids. You must be connected to the same WiFi as the victim. It is said to be working even when WPA2 is present. How is it possible? I can decrypt ...
19
votes
1answer
2k views

WPA significantly less secure than WPA2?

I understand at least theoretically WPA2 is more secure than WPA, but in practice does it make any difference which one you use? From what I know there are no known attacks for either except for ...
5
votes
3answers
3k views

Is it possible for someone to figure out my WIFI password by following me?

Say someone drives up and parks in front of my house. They get a list of all SSIDs they can pick up. My phone is configured to save the WPA2 password and automatically login when the SSID is in range. ...
21
votes
2answers
14k views

Strength of WEP, WPA and WPA 2 PSK

I know there are three method for wifi security. What are the relative strengths of the password encryption in WEP, WPA and WPA2 PSK?
11
votes
2answers
13k views

Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?

is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks. If it can, how, but if not, is there another ...
17
votes
3answers
9k views

Can someone get my WPA2 password with honeypots?

Yesterday I went to my cousin's home and I saw that I'm not connected to his wireless (for internet access). Then I have looked up the list of wireless points. I have found his name and clicked it ...
2
votes
1answer
178 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
11
votes
2answers
2k views

Would an unnecessarily long password degrade performance of a WPA2 wireless network?

My friend wants to keep his home network super-secure, due to some trouble that he's had with unwelcome Wi-Fi intruders. So, naturally, he devised an ultra-long WPA2 passphrase (on the order of 100+ ...
7
votes
1answer
979 views

How to get hold of and use WPA session keys?

I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
8
votes
2answers
5k views

WPA2 Enterprise AES encryption key size?

I have recently set up a RADIUS server with EAP for my wireless router, however, I have some questions about the key size and how WPA2 enterprise (AES) works in general. I have read that in ...
0
votes
2answers
5k views

What are the methods to crack WPA and WPA2? [closed]

Is there any method other than brute force and dictionary attacks to break WPA and WPA2?
8
votes
5answers
60k views

Bruteforce on 10 characters length WPA2 password

I'm trying to hack my own WPA2 network for learning purposes. I have the *.cap file generated by aircrack-ng tools after a WPA handshake. I've tested by including my own password and a bunch of ...
8
votes
3answers
2k views

Encrypt WiFi connection per connected user

One of the questions that comes on quite often is about WiFi encryption. Now imagine that you have multiple users connecting to one AP. With a simple WPA2 protection setup they can still sniff each ...
6
votes
1answer
10k views

How exactly does 4-way handshake cracking work?

From my understanding this is how WPA2 works for home networks: PSK(Pre-Shared Key) is used to generate PMK(Pairwise Master Key), which is used together with ANonce(AP Nonce) to create PTK(Pairwise ...
5
votes
1answer
4k views

What makes PINless Wi-Fi Direct using WPS on Android secure?

I've read from Wikipedia that Wi-Fi direct uses WPS (Wifi Protected Setup), and I know that in Android (at least what I have which is 4.0.1 on Galaxy S3) uses the WPS method of the "push button" to ...
5
votes
2answers
1k views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
4
votes
5answers
6k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
7
votes
2answers
2k views

Does WPA2 Enterprise mitigate evil twin attacks?

One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
6
votes
5answers
543 views

Does mixing different types of encryption make the connection more secure?

Like when I browse a website using SSL from my laptop that is connected to my router using WPA2. My router talks to my ISP using IPsec. Is that more secure or do these types of encryption have ...
3
votes
1answer
64 views

MITM over WPA2 (e.g. with ettercap)

I've read on a few sites that it's possible to conduct MITM attacks over WPA2-secured connections. So for example I could replace the content of a site a user tries to access over HTTP. Is this true? ...
3
votes
2answers
25k views

How to setup GPU for Cracking WPA/WPA2?

I have a Dell N5110 15R Laptop that I'm planning to use for GPU based cracking of WPA/WPA2 passwords. The thing is, I'm not a really big fan of password dictionaries and rainbow tables, I'd rather ...
1
vote
0answers
104 views

get a key HEX from wpa/wpa2 handshake [closed]

Can I get a key HEX from wpa/wpa2 handshake, or from the network in another way without knowing the passphrase? Example: Network SSID: linksys54gh WPA passphrase: radiustest Hexadecimal key: ...
1
vote
2answers
40k views

WiFi WPA cracking with Reaver [closed]

This question is for anyone who has tried or succeeded to crack WiFi WPA/WPA2 keys with BackTrack Linux and Reaver. So, I wanted to test it on my WiFi router. I started everything as described here. ...
0
votes
1answer
772 views

WPA/PSK Dictionaries

So i have been reading some articles on WPA/PSK encryption, And one said that the hash is calculated like this: Key = PBKDF2(passphrase, ssid, 4096, 256) Where PBKDF2 is a standardized method ...