Tag Info

New answers tagged

1

TLDR: Basically with what you're asking, only ARP broadcasts, unless you subnet your wireless from your wired network. Overall it depends. First, your computer on the ethernet may occasionally send out broadcasts to the whole network. For example, if it needs the MAC address of a machine on the local network, it will send out an ARP broadcast to all ...


0

Yes. Regardless as to whether or not the victim is hooked up to the router via Ethernet cable or WiFi, it's still connected to the same router - sharing what's obviously known as the same LAN. Being on the same network makes it very easy for the attacker to utilize tools such as BackTrack, a distribution of Linux, to use command line functions, suites, and ...


0

Most sniffing (sometimes called passive sniffing) happens when I read signals that weren't intended for me. I can read them because you don't shoot your signals to a router like a beam, you just kind of emanate them in all directions and hope the router picks up. The important thing about passive sniffing is that it's undetectable - you can't see or control ...


2

Vulnerable clients are less of a problem than vulnerable servers. The major web browsers don't use OpenSSL for security, and most non-browser clients (eg. database interfaces or email programs) are rather picky about which servers they connect to.


0

dublicate actually good answers here and here I have tested my self firefox and google chrome on my systems - looks like not affected tested wget - affected - but probability that someone will use wget not high. So for clients side all looks not so bad, because general user tools looks like not affected.


0

You are looking for the IEEE public OUI database: https://standards.ieee.org/develop/regauth/oui/public.html With the vendor identified you can then zero in on the actual product.


3

This is based on my answer to Devices with cryptic names and Chinese ip addresses connected to my router but adjusted for hotspots (i.e. no web interface), since the same general steps apply; the difference in questions is that they didn't know what the devices were (and still don't - some are spoofed), and you see a Samsung MAC (which may also be spoofed, ...


7

Though the OSI model is more often a source of confusion than enlightenment, it is here reasonably informative. The WiFi encryption occurs in layer 2 ("data link") because it strives to embody a security feature which is inherently related to the data link. Namely, WiFi was designed to be the over-the-air equivalent of wired Ethernet. In Ethernet networks, ...


3

Good old AWUS036H. Not only it's still one of the best of its class, every single pentesting software has been tested on (if not built with) it.


6

There are plenty of wireless cards to choose from in this area. The best in my opinion is the trusty old alfa AWUS036H with the rtl8187 chip-set. This card has been my favorite for a long time and is still going strong after years of persistent use. The alfa is also 'plug and play' for pretty much all Linux distros and has good drivers for windows with only ...


1

The answer to your question is, no. with a WPA-PSK authenticated network, the PSK is never actually sent over the wire, the protocol is designed to prove that both the client machine (a.k.a station) and Access point have the same key before commencing communication. If an attacker can sniff the traffic sent between the station and the access point during ...


3

Consider checking the Aircrack wiki if in doubt. It's also a good idea to Google + kali/backtrack to see if anyone has had any problems with a card you are considering. Be sure to check the date though. Someone saying it didn't work in 2005 is not helpful. Also look for one with a removable antenna. They usually come with 2-3 inch ones, but if you can ...


9

If you want to penetest a wifi. The wifi card would need to support monitor mode. However vmware uses it's own usb drivers so you might want to install kali to your hard drive or run it off a cd/usb. If you want to pick up weak signal's you need a card with high watt's and a good antenna www.alfa.com.tw has some high power wifi cards at a reasonable price.


2

The answer is yes, he can see what you're doing on the internet when he is connected to your WiFi network. The encryption protocol used is pretty much irrelevant. Whilst WPA2 will generate a unique session key for each client association, if the attacker captures this he can still decrypt your traffic. Even if the attacker doesn't capture it, he can forge ...


-2

Short answer: WEP? Yes. WPA? Maybe. WPA2? No. WEP is broken and you shouldn't be using it for a multitude of reasons so we'll skip that. Some WPA networks can be exploited by attackers who do not know the password. http://www.aircrack-ng.org/doku.php?id=tkiptun-ng WPA2 is what you should be using. In this scheme each client connected to the access point ...


0

You need to remember to tell the client about the gateway (which is you) and the gateway about the client (which is also you). It seems you have as the error says only spoofed one side of the network. You need to tell the router your the PC and the PC your the router and enable yourself to forward these packets along too. Forwarding is achieved in linux be ...


0

Search online for website that can scan your public IP for open ports for you, or ask a friend to do it for you. In latter case, search for software for "port scanning", "penetration testing" or so. I would run Nmap (with Zenmap GUI) for starters on mine.


0

http://en.wikipedia.org/wiki/Private_network You're most probably in a private network IP range. It is not accessible through public network (Internet)


4

You may already be safe: if you typed your IP address into the address bar of a computer connected to the router, being able to access the router admin page is normal. The router knows your computer is on the "inside" part of the network, and should be allowed to control the router. The only time you have a problem is if you type your IP address into a ...


0

This is only a little safe if the password is something you only know and is not default such as admin. It would be best to go into your control panel and disable remote management if there is no reason for you to access this over the internet and other people too. Hope this helps


0

The Wifi Positioning System tells where you are by seeing what wireless access points are visible, looking up their assumed locations in a database, and calculating the most likely position for the WPS antenna. In theory, WPS doesn't require an Internet connection to tell where you are. If the device comes pre-loaded with a database of AP locations, it can ...


1

You asked quite a lot of different questions here. I'll try answering each. Spoofing/sniffing: The cure is encryption. More specifically Public Key Infrastructure. Then B can't modify (or even decrypt) data that it's relaying. The only question here is how you want to implement the key exchange (so that it can't be attacked). Open ports: An open port is ...


0

I have come across a story in which the attackers not only infected the BIOS of the machine making it nearly impossible to remove but transmitted it over micrphone/speakers. Obviously this should be took with a grain of salt as it doesn't seem very practical but the story can be found here!


0

You could always set up a honeypot in conjunction with not broadcasting your SSID (service set identifier). An attacker would not know the real AP exists, thus attack the honeypot which you can log to varying degrees based on how much knowledge you have. A simple google search will wield you with many tools. MAC address filtering is a good security feature ...


0

There is a framework called snoopy which does this. I haven't really had a look into it but it may be what your looking for. Hope this helps


3

You may be having difficultly because it's not a network based interception of http, it's a radio based interception of data at layer 1 (physical). Essentially, on a wired network: Layer 1 (physical): Copper or fiber wires and physical devices (NIC, GBIC, switch, router, firewall). Interception at Layer 1 (i.e. using port mirroring on a switch to direct ...


4

Your wireless card needs to run in 'promiscuous' mode. Only a few can and work with wireshark, but they are known. In a switched LAN environment, you would only see broadcast traffic from other users, like you say, but in a wifi environment, there is no switch and everyone sees everything. Each wifi device is broadcasting over the air. Wireshark is the ...


1

Think a bit outside the box. What's WLAN in hardware? A pair of antennas broadcasting and receiving. Where is that antenna at your device sending to? Directionally to the hotspot? No, it is sending everywhere, in every direction, hoping the hotspot picks it up. When the network doesn't use a password, this signal is unencrypted. All you need to eavesdrop is ...


0

Yes, this is true. However, the attacker will have to respond with a beacon which correspond with your client configuration. It has to have the same encryption methods set. There is a tool to automate this process of creating fake AP's which tries the various encryption option. Its named Wifi Honeypot, and can be found here Your password will not be sent ...


5

Most WiFi enabled devices broadcast their Mac address when probing for networks to join in the vicinity. By placing your own WiFi device in promiscuous/listening mode and utilizing a tool like Aircrack-ng, you can see and record all broadcast traffic enabling you to see if a device with a specific MAC address comes within earshot of your listening device. ...


0

Please check for a "bridge password" somewhere (after, of course, updating your firmware) - there's some reference to one in a Whirlpool forum post, though another user in that post couldn't find it. As far as needing security, unless you want other to be able to intercept your data and see what you're doing or possibly inject themselves into your network, ...


3

I believe spartan is talking about Wifi "probe requests". You can capture these using wireshark when your wireless adapter is set to "monitor mode". You can filter for them using the following syntax: wlan.fc.type_subtype == 0x04 These are managment frames and are basically frames sent from your client to find out which wireless networks / AP are ...


1

The closest thing to a 'hello' packet concept in a smart phone, which mostly use TCP/IP, will probably be a DHCP-DISCOVER broadcast and then subsequent ARP requests, presuming it is active on the network. Most smart phones will probably respond to ping, too, so presuming you have control over DHCP on the network, once you know its IP address, send pings to ...


0

First, some vendors were treating the first half of the WPS key like a MAC OUI, and was static (many vendors have since fixed this) I don't see a lot of change in this, very recent hardware comes on the market with a generical PIN or using a nown algorithm. Eventhough he builder is aware of the isssue and implemented a AP rate limit, then the Internet ...



Top 50 recent answers are included