Questions tagged [rogue-ap]
A rogue AP is an unauthorized wireless access point placed on a network to allow access to the network it is attached to.
17 questions
2
votes
2
answers
446
views
WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?
We are using, as default, PEAP and MS-CHAPv2 as inner authentication.
I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
CommunityBot
- 1
1
vote
1
answer
297
views
Strange non-routable IP address for my mobile phone
I have a Samsung Galaxy S21 FE, and I can't for the life of me imagine how I ended up with a non-routable IANA Reserved IP address on my mobile phone (the address is showing as 192.0.0.2). The phone ...
- 5,406
25
votes
8
answers
48k
views
Tracking down a rogue access point
Over the course of about a month we have received multiple reports of a rogue access point attempting to intercept traffic. I suspect an attacker is using a wifi pineapple or similar hardware device. ...
- 2,993
14
votes
3
answers
26k
views
Whats the difference between an evil twin and a rogue access point?
I'm having a hard time understanding the difference between a rogue AP and an evil twin. I've spent some time searching for it, but I don't think I understand it fully.
Is the AP a device that needs ...
- 2,993
0
votes
0
answers
23
views
What a Rogue AP can do? Can it intercept traffic? [duplicate]
Why a Rogue Access Point can "intercept" all traffic? Rogue AP doesn't know the shared key, so can't decrypt the traffic... So what are the dangers? What harm can a Rogue Access Point do?
- 132k
16
votes
2
answers
6k
views
How does WPA2-PSK prevent evil twin password phishing?
Let's say we have a WPA2-PSK secured AP and there are several clients like smartphones and notebooks that automatically connect to it.
Now if someone was to create another AP that looked completely ...
- 2,993
0
votes
1
answer
175
views
Suspected Audio/Wireless/Bluetooth Hijacking - Need Expert Insight [closed]
I have reason to believe that there may be ongoing audio/wireless/Bluetooth hijacking occurring in my network environment.
The issue appears to involve unauthorized access to Bluetooth and wireless ...
- 132k
0
votes
1
answer
514
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 208k
4
votes
2
answers
332
views
Is it foolish to trust a Wi-Fi network just because it uses a specific recognized SSID?
This article in the Avira (part of NortonLifeLock) security blog discusses (vaguely) security risks of public Wi-Fi. The article states:
Man in the middle attacks are also a very prominent threat, ...
- 24.1k
0
votes
1
answer
376
views
How and what can attackers use Rogue AP attacks for? [closed]
I have some questions about rogue access points.
How attackers can get victim's creds over secured HTTPS websites?
Can attackers do this kind of attack only by using basic tools + sharing the AP ...
- 8,465
0
votes
0
answers
233
views
Man in the middle after evil twin
I've set up an Evil twin access point using the aircrack suite, what i'm missing is how to complete the man in the middle access point side like the picture shown below, I've been suggested ettercap ...
- 40
1
vote
2
answers
1k
views
Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?
I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
- 4,057
24
votes
2
answers
8k
views
Rude neighbor with PineAP or something similar
For the past week or so I've been having problems with wifi in my house, and it appears that my neighbor set up a Pineapple or something similar that is running a known beacon attack and/or Karma/...
- 1
0
votes
0
answers
37
views
evil twin like attack [duplicate]
Is it possible to make a fake AP with the same SSID that has a password and when clients try to access it and type a password, the software verifies it with a handshake?
- 132k
3
votes
1
answer
4k
views
Can you detect a wifi pineapple or rogue AP with MAC address?
This posting has some good advice for tracking rogue access points:
Tracking down a rogue access point
The issue I have is that many will not work for a huge deployment. I'd like to build a device ...
- 1,905
1
vote
0
answers
370
views
Can not create an "evil twin access point" with the same SSID as the original
I am practising pen-testing for a while now and I have a kali Linux 2017.2 physical machine. I tried to create an evil twin access point using tools like fluxion, wifiphisher and wifi-pumpkin. Note ...
- 8,021
2
votes
1
answer
265
views
Find rogue access point if area is saturated with networks
What do you do if you scan for rogue Access Points and find that the area is saturated by surrounding businesses with their own wifi?
I recently scanned for wifi networks and found 60+ networks just ...
- 3,459