Questions tagged [wep]

Wired Equivalent Privacy (WEP) is a security protocol for 802.11-based wireless networks.

Filter by
Sorted by
Tagged with
43
votes
3answers
49k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
27
votes
2answers
21k views

Strength of WEP, WPA and WPA 2 PSK

I know there are three method for wifi security. What are the relative strengths of the password encryption in WEP, WPA and WPA2 PSK?
24
votes
8answers
6k views

Is there a way to make a WEP-secured AP uncrackable?

For some days, I was feeling that my Internet bill was booming. Then, I recently found out that a boy near my house was accessing my router to use the Internet. Then, I read some articles how to crack ...
17
votes
3answers
7k views

Is WEP still a thing?

I was studying the Wi-Fi security section for a pentesting certification the other day and there is an extensive part about cracking WEP. Is going in-depth on WEP cracking worth it anymore? According ...
9
votes
3answers
21k views

How does WEP wireless security work?

I want to know more about how WEP (Wired Equivalent Privacy) protocol for wireless security. From this Wikipedia article I have got a basic Idea. But what is the initialize vector? Is some kind of ...
6
votes
1answer
2k views

What is the most used WiFi encryption? [WEP/WPA/WPA2] [closed]

I am doing some research on WiFi for my school and one question I want to answer is what encryption is the most used. One day it was of course WEP and now it is WPA2 I assume, but it would be great if ...
6
votes
2answers
708 views

What are weak IVs? Can we somehow stop or slow down WEP cracking by avoiding usage of them?

Most of us dealing with wireless security must have cracked a WEP key, and while doing that must have come across texts like this: weak IVs, reveal more information about the secret part of the WEP ...
5
votes
1answer
3k views

Why crack WEP or WPA/WPA2 PSK when it can be sniffed through monitor mode capture?

I am pretty new to the domain of wireless security and am trying to understand the various techniques used for compromising wireless networks. There are a few things that I am not able to correlate ...
5
votes
3answers
516 views

Security difference in wardriving open network versus monitoring traffic on a network to which I am authenticated

I have been listening to the CBT nuggets on comptia security+ and there were a few sections on wireless security. A question that occurred to me was: if I am authorized to use a wireless network, and ...
5
votes
1answer
626 views

wireless security - Authentication and Association

I am trying to learn wireless security a bit more technically but resources out there on the net are so confusing. Here is my understanding. There are two types of Authentication: 1) Open System ...
4
votes
1answer
2k views

How to simulate a WEP cracking scenario for faster cracking in local lab?

I need to illustrate WEP cracking methods, I'll be using aircrack suit for that. There is a little problem that I want to speed up the method for very fast packet capturing, since this is just an ...
4
votes
1answer
689 views

Sniff wireless (Wi-Fi) trafic with Wireshark

I have a wireless card (AWUS036H) in monitor mode (with airmon-ng start wlan0) on my Debian machine. In Wireshark, in "capture options", all my interfaces are in promiscuous mode. The test network is ...
3
votes
1answer
625 views

Aircrack-ng: Why deauth works

When using aircrack to attack WPA, deauth packets are used to force a host to deauthenticate. But the machine sending these deauth packets is not even connected to the network. How possible is it that ...
3
votes
2answers
2k views

Is the Karma attack still relevant today?

I tried replicating the Karma attack and it does not work on my iphone5s and galaxy s6. Even when the phones send out directed probe requests and the Rouge AP responds with the appropriate probe ...
3
votes
2answers
376 views

Attacking WEP/WPA/WPA2

When attacking WEP/WPA/WPA2, I see people buy a wireless network adapter (e.g. Alfa). Why can't an inbuilt adapter in a laptop work? Or in other words, is there a quick way for me to check if the ...
3
votes
3answers
805 views

Authentication in WPA from a user's perspective

I have read several articles that discuss the differences between WEP and WPA but I haven't seen an answer to my question, which is : How is the authentication used in WPA different from that used ...
3
votes
1answer
138 views

Standard for Generating Multiple WEP Keys From a Passphrase

I've been reading a lot about WEP recently and why it was bad. To make sure I understand it, I've been writing scripts to show how it works and highlight its vulnerabilities. But I want to have a full ...
3
votes
2answers
4k views

Decoding tunnel bytes in EAP-TLS or EAP-TTLS using Wireshark

I have a few pcaps of traffic for EAP-TTLS conversation, carried by RADIUS. I also have some being carried by EAPoL, but I think the answer to that case might be even less straightforward (though ...
3
votes
1answer
601 views

Arp replay for cracking WEP key IN Aircrack-ng

I'm pretty new to all of this so it might be a little stupid question... but why do we need to wait to capture an arp packet from a client to the AP? Can't we just send a 'fake' arp request to the AP ...
3
votes
1answer
350 views

Can I perform WEP cracking from several laptops against 1 AP

I have successfully being able to perform WEP key cracking attack using aircrack tool. I want to allow my students to test this in a lab environment. They will be working fro their own laptops against ...
3
votes
1answer
288 views

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?

Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
3
votes
1answer
930 views

Klein and PTW wep attack

I'm working on an implementation of Klein's wep attack. For that, I've set up a router with wep encryption and collected 50,000 unique IVs from it. I tried only calculating K[0], meaning - the first ...
3
votes
2answers
249 views

Could SSL-like encryption be used for not password-protected wireless access points?

I'm looking at ways an outsider (i.e. someone without a possible password) of the network could sniff the communication within the network, specifically focusing on WLAN. This is what I understand ...
3
votes
0answers
1k views

What is the most common default security setting on most consumer and small business Wi-Fi routers? [closed]

I am writing a paper right now which involves Wi-Fi security (I'll spare you the details). A major argument in this area depends on the assertion that Wi-Fi routers come defaulted as open networks (ie ...
2
votes
4answers
654 views

Which Wifi encryption method is secure?

Apple just removed the ethernet port from new MacBooks which means we have to use Wifi! But I think WEP encryption is broken, and WPA encryption which I can't see on Mac is also broken. So Wifi means ...
2
votes
2answers
789 views

How bad is WEP security presently?

I just discovered that a wireless network that I frequently connect to still uses WEP security. How bad is this for me, the end user of the network? What steps should I take to secure my devices, ...
2
votes
2answers
803 views

Data sniffing on a WEP 128-bit encryption

I am relatively new to cybersecurity and hacking and I aim to learn ethical hacking as a passion alongside my mainstream education(Electrical Engineering). My setup: I have set up my very own WEP ...
2
votes
1answer
863 views

Packet Injection during attacks on WPA/WPA2/WEP — How it works

Most Wi-Fi attacks rely on some kind of packet injection. This could be in the form of injecting deauth packets, arp packets, etc. I have a question about these fake packets -- Are they constructed ...
2
votes
2answers
1k views

How to determine if a key is a weak key

How to do you decide that a particular key is a weak key? In the case of WEP, the weak keys seem to be those whose initialization vectors are in the form of (B + 3,255,x). Does the condition for weak ...
2
votes
1answer
751 views

Kismet Output Shows 3 Possible Encryption Options, Which one?

Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network. Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
2
votes
1answer
5k views

How to find a wep key inside a pcap file with only 2 IV?

I have a pcap file that contains 3 packets. I need to find a WEP key inside these packets. These packets contains only two IV. It's not a live attack so I can't try brute force.
2
votes
1answer
218 views

When running a WEP fragmentation attack on an AP with no clients, how are the first few bytes of keystream obtained?

As I've understood Andrea Bittau's fragmentation attack, an attacker can obtain a keystream of arbitrary length if he can first obtain a very small keystream of about 8 bytes. I understand that this ...
2
votes
1answer
9k views

How ChopChop attack against WEP actually works?

From my understanding, ChopChop attack against WEP, which goal is to decrypt one packet without need to know the WEP key, goes like this: First, the attacker takes one ciphertext message from the RF ...
2
votes
0answers
74 views

Determining time it would take to exhaust IVs on 802.11b/g/n

I'm trying to learn about WEP attacks at the moment. I know that attacks against WEP require collisions of the initialization vectors. Is there a way to determine how long it would take for the ...
1
vote
3answers
193 views

Why is it called WEP? [closed]

The WEP standard is called "wired equivalent privacy"? Why does it include "wired"? Does have it have to do with ethernet codes or something else?
1
vote
3answers
131 views

Does use of WEP only open the network to attacks in proximity of the router?

I'm learning about security, and discovered my family's router was set to use WEP, with WPS enabled. I've fixed that, but I couldn't give a great answer for why it was necessary, given that we live in ...
1
vote
2answers
455 views

Does this show the need for a two-factor authentication?

I need some help for my understanding while reading through this authentication scheme in WEP. In a WEP authentication scheme, the station first sends a request for authentication. However, this ...
1
vote
1answer
77 views

Set up a WEP network as safely as possible [duplicate]

WEP is dead and no one should use it... but I have a couple of devices that I would like to use (mainly an original DS that does not support any of the newer standards) Is it possible to set up a ...
1
vote
3answers
239 views

A neighbor is using a WEP encrypted router, should I inform them of the security risk? [closed]

Someone in my neighborhood is using a WEP encrypted wifi router. I am not sure who they are yet, but if I find out, should I inform them of the security risks which that poses or are there any legal ...
1
vote
1answer
142 views

How to speed up brute forcing of finding a WEP key from a captured file?

I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I am wondering: Can I get a clue from the captured file to speed the process of brute-forcing? If not, what other ways ...
1
vote
1answer
533 views

ARP request replay attack - why do APs work the way they do?

ARP request replay attacks are based on the practice that wireless access points repeat ARP packets injected into the network, and since these ARP packets are encrypted, they also carry the IV with it....
1
vote
1answer
971 views

Is (WEP) shared key authentication secure?

I've been reading up on wireless authentication and shared key authentication sounds completely bonkers. I know WEP is very insecure and breaking it with aircrack-ng takes 5-15 minutes but this sounds ...
1
vote
3answers
659 views

Handshake not recording

I am trying to crack wireless WEP password of my wireless AP. When I enable monitor mode and issue this command: root#airodump-ng -w TESTFILE1 -c 1 --bssid 68:72:51:58:A3:14 wlan0mon No handshake ...
1
vote
2answers
1k views

Regarding number of packets needed to crack WEP

One of the major weaknesses of WEP is a short 24-bit IV, which means that only 224 packets are needed to exhaust all IVs. 224 translates to about 16.5 million IVs (or packets for that matter). ...
1
vote
1answer
215 views

Encryption and Decryption in WEP protocol [duplicate]

What is the role of Integrity Check Value in Wireless Equivalent Privacy? Why initialization Vector is sent as a clear message where as Integrity Check Value is sent as a cipher message?
1
vote
0answers
556 views

Different CRC32 implementations? different results?

So recently I managed to implement the Caffe-Latte attack in python. I got stuck for two weeks because the final ICV wouldn't match. After some digging around I found that airbase-ng (which already ...
1
vote
0answers
85 views

What will happen if WEP reuses a challenge?

What will happen if a WEP authentication challenge string is reused? If the access point ran out of unique random numbers and reused one then what would happen? I'd think that if challenges were ...
1
vote
0answers
82 views

How many packets required to deauth WPA? [duplicate]

When using aircrak-ng to attack WPA; Why do I need to send many de-authenticate packets to force the host to deauthenticate? Why is one packet not enough to cause deauthentication?
1
vote
0answers
78 views

fakeauthentication is working when my belkin belkin router f7d2301 mac-address filtering enabled

Actually i have enabled mac-filtering in my belkin router and the security policy is none and the authentication is open authentication. Iam(attacker) using kali linux. when i done a fakeauth attack ...
1
vote
0answers
4k views

How Modification attacks works?

Theoretically... In Active attacks we have "modification attack"...ie "In a message modification attack, an intruder alters packet header addresses to direct a message to a different destination or ...