New answers tagged wifi
The same access point can broadcast several SSIDs, so it looks like the one you're attacking is broadcasting two; and that reaver only shows (or gets from the AP!) a SSID at a time. I would try with a different WPS cracking tool as well to check if you get similar results. You could try with bully or (more obsolete) wpscrack. Bully bundled with Kali Linux. ...
Yes it is still vulnerable. Instead of using reaver you can make your own little script to brute force wps pin. Using a command 'wps_reg'. However if the router has wireless intrusion prevention system the wps feature will probably go to the (WPS)locked state after a couple attempts.
So several companies have a database of Wireless Access Points (Google, Apple, Skyhook). In terms of how the data is collected, I don't believe that any of the companies have made official statements on the matter, but there's a couple of likely avenues. First one point is that your wireless Access Point broadcasts it's BSSID address into, likely public, ...
There really isn't a command for this. Your best bet is to script a scan every few minutes, or find an app which functions more like a spectrum analyzer.
You Could Use Wireshark for your purpose . If u want to see complete traffic flowing over the network then you have to do arp spoofing to make complete network traffic follow through you[u can use ettercap for that purpose]
Sorry to burst your bubble, but you didn't discover any security issue. MAC addresses are a little lower that where WiFi encryption happens. Any device, connected or not, can sniff any and all of the MAC addresses of the devices that use WiFi around it. What you see on the access point's logs (the MAC address) is a piece of information that anybody can ...
If it is turned off in software, it isn't listening for anything and may very well even be powered off. There would be no way for someone to attack it since it wouldn't respond to any attempt to connect with it. It wouldn't even be listening.
Basically, it is 802.1x. Key derivation is complicated. There is a high-level explanation here: http://www.tldp.org/HOWTO/8021X-HOWTO/intro.html To answer your question simply, the key (actually there are several keys) is agreed upon by the AP and client based on another key issued by the authenticating RADIUS server. All of these keys are (ephemeral) ...
Yes, if you're watching the traffic, you can still tell which address a person is connecting to whether or not you can see the contents of that traffic. That's the nature of IP packets. There's no way around it. Then it's just a matter of doing a reverse-lookup on the destination IP to see it's owned by Facebook or Twitter. You can shift the problem ...
Top 50 recent answers are included