How can I detect Wi-Fi login attempts? I was thinking to put an Wi-Fi interface in monitor mode and look for leaked SSIDs.

  • I don't think this will be helpful. Wireless passphrases are not discovered through brute force connection attempts but rather an offline attack. – multithr3at3d Apr 20 '19 at 18:06

To monitor network devices there's essentially two possible protocols: Syslog and SNMP. Both work including for Wi-Fi. But for any detection to happen, you must configure your device to do so.

Many wireless routers log by default failed login attempts. If your actual router device is not sufficient to accomplish this because it does not support certain features, you can upgrade its firmware to DDWRT or OpenWRT.

Once you have a syslog or snmp working, you then can use quite many tools (SNMP Trap Watcher, Kiwi Log Viewer, SysAid Monitoring, SNMP Log Even sentry, etc) to analyze what is happening.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.