0

I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?

  • You mean inside of the network or outside? As you wrote you are already connected to the access point. Therefore, you do not need to decrypt the wireless packets. – Pilfility Jul 4 '18 at 6:07
  • The traffic has been encrypted with the key and therefore the only way to decrypt the traffic is to use the key. Am I missing something? – Aulis Ronkainen Jul 4 '18 at 6:07
1

Short answer

No, you need the pre-shared key.

Longer answer

WPA-PSK and WPA2-PSK encrypt traffic per client and session keys, which are derived from the pre-shared key.

So if you know the pre-shared key for the network (which you don't) and you sniff the four way handshake when another client joins the access point, you could decrypt only that client's traffic.

Note

This only applies assuming access point isolation is not enabled on the access point.

  • Is there a way to obtain the pre-shared key, e.g. by brute-forcing it? – Sjoerd Jul 4 '18 at 12:37
  • how to sniff the four way handshake when another client joins the access point? – mohammad aghazahiri Jul 5 '18 at 10:01
  • @mohammadaghazahiri airodump-ng will do the trick. – Jeroen Jul 5 '18 at 13:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.