0

I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?

Improve this question
2
  • You mean inside of the network or outside? As you wrote you are already connected to the access point. Therefore, you do not need to decrypt the wireless packets.
    – Pilfility
    Commented Jul 4, 2018 at 6:07
  • The traffic has been encrypted with the key and therefore the only way to decrypt the traffic is to use the key. Am I missing something?
    – Aulis Ronkainen
    Commented Jul 4, 2018 at 6:07

1 Answer 1

Reset to default
2

Short answer

No, you need the pre-shared key.

Longer answer

WPA-PSK and WPA2-PSK encrypt traffic per client and session keys, which are derived from the pre-shared key.

So if you know the pre-shared key for the network (which you don't) and you sniff the four way handshake when another client joins the access point, you could decrypt only that client's traffic.

Note

This only applies assuming access point isolation is not enabled on the access point.

Improve this answer
3
  • Is there a way to obtain the pre-shared key, e.g. by brute-forcing it?
    – Sjoerd
    Commented Jul 4, 2018 at 12:37
  • how to sniff the four way handshake when another client joins the access point?
    – Mohammad
    Commented Jul 5, 2018 at 10:01
  • @mohammadaghazahiri airodump-ng will do the trick.
    – Jeroen
    Commented Jul 5, 2018 at 13:01

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .