New answers tagged wpa2
The same access point can broadcast several SSIDs, so it looks like the one you're attacking is broadcasting two; and that reaver only shows (or gets from the AP!) a SSID at a time. I would try with a different WPS cracking tool as well to check if you get similar results. You could try with bully or (more obsolete) wpscrack. Bully bundled with Kali Linux. ...
Yes it is still vulnerable. Instead of using reaver you can make your own little script to brute force wps pin. Using a command 'wps_reg'. However if the router has wireless intrusion prevention system the wps feature will probably go to the (WPS)locked state after a couple attempts.
WEP can't be a better choice. WPA was developed to offer better security and be able to run on machines which had hardware support for WEP (which is why some devices can't use WPA2). If you can run WEP there is no reason you wouldn|t be able to run WPA from a hardware perspective. The only possible reason is that you don't have any software support anymore.
Once upon a time, there used to be wlan devices that only supported WEP. So today WEP would be chosen if you want backwards compatibility with those ancient devices that don't support WPA/WPA-2. Today, WEP offers minimal security and any smart IT person with a few minutes of time and correct hardware can crack it. WEP should not be used.
WEP can be a better choice if you want to teach people how to crack wireless access points, because it is easy to crack. Apart from that use WPA.
Basically, it is 802.1x. Key derivation is complicated. There is a high-level explanation here: http://www.tldp.org/HOWTO/8021X-HOWTO/intro.html To answer your question simply, the key (actually there are several keys) is agreed upon by the AP and client based on another key issued by the authenticating RADIUS server. All of these keys are (ephemeral) ...
Top 50 recent answers are included