Tag Info

Hot answers tagged

81

There is no method to make WEP uncrackable, or at least secure. So I suggest buying a new router that suports WPA2.


40

There is really only one solution to your problem. I do note however that you're not interested in upgrading your router, so I will talk a little about that. Remember that by not upgrading your router, you are only delaying the inevitable. What will work long enough for you to get a new router: PULL THE PLUG This is honestly the best solution until you ...


23

Short version No. All you need is WPA2-AES with a custom SSID and a strong passphrase. All this assumes a "home" scenario where the AP and clients are using a PSK (preshared key). In Enterprise settings there are a couple of other attack vectors but one nice thing about a PSK is it greatly simplifies the attack surface. It pretty much comes down to the ...


15

No. You cannot make WEP uncrackable, but there are some things you may be able to do to help the problem until you get a new router. Modify the signal strength. Take off one (or more) antennas from your router (if you have a small apartment). Move your router to the center of your home. These steps may make it more difficult for a neighbor to get a decent ...


10

WEP has fundamental design flaws preventing it from ever being secure. This means that in order to get a secure network you either have to replace WEP with something secure (WPA2) or enforce security at a higher level in the protocol stack. Security at a higher level in the protocol stack means you don't allow your AP to get access to the internet. Instead ...


4

Just to add on, _optout_ can be added anywhere in the SSID not necessarily at the end. However, Google's _nomap has to be placed at the end. Yes, 802.11x will networks will not be shared through WiFi sense. Official source: Microsoft WiFi sense FAQ. Look under "I'm concerned about sharing Wi‑Fi networks. Can you tell me a little more?" Theoretically, ...


4

I would say that most of the wifi cracking tools can do their job with or without injection, depending on the commands and parameters you provide. For example if you are cracking WPA/WPA2, you can "crack" it without injection by waiting for a client to authenticate and by capturing the 4-way handshake, which you then brute force. In that case, you are not ...


4

non-technical answer: If your connection is (good) encrypted between your Phone and your Mailserver - it should not be a problem. But if not - or accessing via web interface without HTTPS -some bad people or companies will be able to read the data. If you do not trust the encryption and also not the network - don't do it. You also have to trust your ...


3

If a password is strong, then it is strong. WPA2 uses PBKDF2 with 4096 iterations and the network SSID as salt to turn the password into the shared secret. This is not bad. This means that a "strong" password will be, in this case, a password with 68 bits of entropy or more: the 4096 iterations add 12 bits to the brute force effort, and I use the traditional ...


2

From a technical standpoint, there's no "just" to "just doing an aircrack wifi attack". Almost all wifi networks these days use WPA or WPA2 security. Logging into the network without authorization requires capturing a four-way handshake (easy), and then brute-forcing the password (very, very hard). Unless the network administrator has selected an ...


2

To be honest, I find that most people don't / won't care. Unless they are running a business or similar functionality over the network I wouldn't bother explaining the difference between WEP and WPA2 to them, especially since they might not be tech savvy and just get more confused or worried about it. At least they are using SOME security. I have been to ...


2

The exact answer to this depends on the level of control you have over the wifi network. Assuming that you can dictate things like proxy servers, then the best option might be to install a forward proxy (something like squid) and then have that do the logging for you. If you need to know actual URLs rather than just sites, you'll need to set-up SSL ...


3

Whether you company will be able to see the content of your chats depends on a couple of factors Is your access to the chat site encrypted? if you're using SSL, then normally someone running a network you're accessing it over, will not be able to see the content of the chat (although they will likely know the name of the site you're accessing). The ...


2

tcpdump will dump all IP packets captured from the network you are currently connected to. According to your explanation and elements, you have make the interface up but you did not connect to any Wifi network: no network, no network packet to capture, so no tcpdump output, it's all simple as that. You must first connect to an Access Point, then you can ...


1

Whether your company will control your use of the Wi-Fi will depend first of a key point: Is the policy of your company to provide a Wi-Fi network for professionnal use or for private use or for both? From the name with which you named your company Wi-Fi: "guest" Wi-Fi, I am tempted to diagnose that this Wi-Fi is targeted to provide an access to external ...


1

You can use airmong-ng that comes installed by default in Kali Linux. I once used this opensource library on Backtrack 5 (ancestor of Kali Linux) that uses sslstrip created by Moxie Marlinspike and which unencrypted HTTP sessions look as much as possible like HTTPS session (to get passwords for Yahoo, Facebook ...) in plain text. This library relies also ...


1

I faced before such problem before,try adding --ignore-negative-one, and make sure you put each of the client MAC and the router's MAC in the correct places: aireplay-ng -0 5 -a TARGET BSSID -c CONNECTED-CLIENT-MAC GENERATED MONITOR MODE NAME --ignore-negative-one


1

If you can automate the changing of the WEP password across your network and do so with a new password every 5 minutes, your network will be fairly well protected against casual attackers. It will not be uncrackable though. If you change your network password every 3 seconds, though, it will be uncrackable, as the fastest crackers still require several ...


1

Imagine your neighbor came up to you and told you that he was looking at the locks on your house and noticed they were really easy to pick with a simple and cheap pick gun, available on the internet. With such a tool someone could get in your house in 5 minutes. He then said you should upgrade to hard to pick Medeco locks. Would you think your neighbor ...


1

I don't believe there are legal ramifications in advising someone about security, but you may want to approach it cautiously. You'll definitely want to explain in a way that fits the user's ability level as far as tech is concerned, and if they're using WEP they may not be very well versed. They may ask for your help in setting up a stronger encryption as ...


1

Provided, you want to stick with the router you have, you can: Since it takes time to actually crack WEP since one has to collect enough IV packets, it makes sense to change the password on a regular basis. You can also automate the process. Go for MAC filtering. This will make things a little bit more complicated for the attacker. Go for the longest WEP ...


1

First of all, nothing is uncrackable. You can certainly make your passwords more difficult to crack, use better algorithms, but nothing would be uncrackable. You can upgrade your router which supports WPA/WPA2. If your router firmware supports, you can also track the MAC-ID being used by the boy, and add it to black list. But again, it is easy to change ...



Only top voted, non community-wiki answers of a minimum length are eligible