All Questions
11 questions
23
votes
3
answers
96k
views
Four-way Handshake in WPA-Personal (WPA-PSK)
Can someone explain to me in what consists the Four-way Handshake in WPA-Personal (WPA with Pre-Shared Key), which informations are being sent between AP and client, how is it possible to find the AP ...
- 399
40
votes
5
answers
10k
views
Security impact of using a public password for free WiFi
We have a WiFi network that we want to be public and free.
Does having a password that is known to everyone provide any additional security advantage to the people using this network as opposed to ...
- 625
69
votes
9
answers
31k
views
Why isn't open WiFi encrypted?
As far as I understand, WiFi networks that require no password send traffic through the air unencrypted. Those that require a password encrypt each connection uniquely, even if they're all using the ...
- 2,764
12
votes
3
answers
9k
views
Is it possible to speed up WPA/WPA2-PSK cracking using a rogue AP?
We know that WPA/WPA2-PSK uses a PTK (Pairwise Transient Key) for each client to encrypt the communication. This PTK is generated through the process known as 4-way handshake. As told in the related ...
- 223
12
votes
1
answer
41k
views
How long to brute-force WPA password?
Bob has a password (for his WPA encrypted wifi) which is 8 characters, all lowercase, and not a dictionary word.
Eve lives next door to Bob and wants to illegally hack his WPA. The number of ...
- 2,084
64
votes
3
answers
17k
views
Why does Windows store Wi-Fi passwords in a reversible format?
Running
netsh wlan export profile key=clear
in PowerShell will dump your current stored Wi-Fi settings, including the password, into xml files inside of whatever directory you are currently in.
Why ...
- 741
32
votes
6
answers
94k
views
Recommend Length for Wi-FI PSK?
I currently have a network set up with WPA2 and AES encryption, the password is 8 characters long but was randomly generated and contains no dictionary words. However I'm concerned about the ...
- 423
12
votes
5
answers
947
views
How should I tell an organisation that they are vulnerable when I wasn't given permission to check?
I was recently at a village hall (in the UK), some distance from where I live, for a party. I noticed that they had unsecured wi-fi with an SSID of NETGEAR. I assumed it was free wi-fi for users of ...
- 121
11
votes
5
answers
2k
views
My ISP shows my WiFi password on their public site in plain text. Should I be worried?
I recently noticed that when logged into my ISPs (Spectrum) public, external site that can be accessed outside my network, I can see my home network's WPA2 password in plain text.
This clearly means ...
1
vote
1
answer
8k
views
What kind of backdoor can be made after hacking wi-fi? [closed]
I'm interested to know if A hacks B's wifi password, what can A do to gain persistent access to the router even after B changes the wifi password? Secondly, how can we detect the backdoor and patch it?...
- 867
1
vote
1
answer
713
views
Accessing WPA/WPA2 password from native auth form on a rogue router
I'm trying to wrap my head around the WPA/WPA2 4-way handshake in an attempt to determine if it is possible for a rogue wireless access point to retrieve a plaintext (or hashed) version of a router's ...
- 135