0

enter image description here


As you can see that in the second list -visible devices, if I am not mistaken- the top device is my main laptop, this output is from a different laptop that is, of course, not connected to any networks (otherwise airmon-ng wouldn't start).

How/where does it get this list of networks the computer has connected to? And is this a problem security wise?

1
  • Those would be "probes" and the output indicates. Your device is actively asking if those networks are available.
    – schroeder
    Sep 8, 2015 at 22:20

1 Answer 1

3

This is called "Probe Request" and it is a special frame sent by a client station requesting information from either a specific access point, specified by SSID, or all access points in the area, specified with the broadcast SSID.

You can read more information about this here.

How/where does it get this list of networks the computer has connected to?

It's a list with all known networks your device has successfully connected and marked as "Auto-Connect" by your system.

is this a problem security wise?

Yes, because an attacker could reply to the probe request with a fake AP, created only to sniff your data. It's possible to perform this with a lot of tools, even with your own OS, creating a hotspot with the same name as the network your computer is probing.

I recommend you reading this and taking a look at WifiPhiser.

And no, you cannot disable this, because it's essential to inter-AP roaming.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .