If you are with your phone out of the house and you have wlan enabled. Your phone is screaming out to world i'm looking for the wlan with the name "yourhomewlanname". If someone has the router equipment, he can easily say he's the router and just throw away the password and route all traffic through his router. This is a massive security hole!

Why is this not yet removed?

The next thing is WPS System here is described how horrible this is it.

The third thing is that you can sent deauc to any device and it will automatically reconnect, you can capture the handshake, and try to decrypt the handshake locally!! If the password is not in an dictionary or long enough, this doesn't matter. But still that you can try it locally is not the best design, since you can use arbitrary many machine power to decrypt it. If you had to use for every combination the interaction with the router this would be much more limited.

After all that, i am really asking myself. Why do people invent things like WPA2 and then implement the rest so weakly?


No, as an attacker, in order to make your phone auto connect to a spoofed wireless network with the same essid of your 'home network', he needs your AP MAC address, which your phone is not probing, and also he must uses same security levels as your AP 'with the same keys'.

Yes, WPS is a vulnerability and it's been exploited by many tools. And sadly WPS is enabled by default on many APs.

Also Yes, you can crack WPA1 and WPA2 using a good dictionary attack, all you need is time and a well defined dictionary.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.