Questions tagged [wifi]
Security for 802.11 wireless networks.
1,465
questions
0
votes
0
answers
25
views
Does WPA/WPA2 mixed mode have weak security even if I always connect using WPA2-AES?
My Wi-Fi access point is in "WPA/WPA2 mixed mode", which allows devices to connect to it using either WPA, WPA2-TKIP, or WPA2-AES. My Apple® smartphones and tablet computers are warning that ...
- 703
1
vote
0
answers
19
views
Device sends ARP request instead of DHCP DISCOVER after being de-authenticated
I have a mobile hotspot that is acting as my access point. The access point operates on the 192.168.137.x subnet. I am currently testing the effects of a de-authentication attack on the access point, ...
- 11
0
votes
0
answers
26
views
Public Wi-Fi dangers for coffee shop owners? [closed]
If someone do something illegal using a coffee shop Wi-Fi that has no login password and FBI trace the router, will the owner of the coffee shop take the responsibility?
0
votes
1
answer
27
views
Find physical MAC address on a spoofed network adapter using the Wi-Fi network?
If someone has spoofed his MAC address, can I find his real MAC address? I've used nmap, but it shows only the spoofed address. This article mentions about sequence number (SN) tracking technique, but ...
0
votes
0
answers
21
views
Tracking location of a SIM card using only mobile data?
SIM card supporting mobile data (5G) is inserted into a WiFi router (without GPS supported) - how accurate can be tracked by the mobile operator if the government has a warrant? Is the cell tower ...
0
votes
0
answers
62
views
How do I stop xfinity IP address from being used as a proxy [closed]
I have extra devices on my Wi-Fi that are not mine and I want to find out where these devices are. There are iPhones on my wifi that I know I haven’t connected.
I was told by a friend that my IP ...
0
votes
0
answers
24
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
-1
votes
0
answers
38
views
Seperator unmatched error in .hc2200 hashcat
I have tried many times but have failed to proceed because of the error.
Here are the files: https://drive.google.com/drive/folders/1GJayxjh9GXYO0rUStaKXcjLaVqiXSZLO?usp=share_link
C:\Users\Admin\...
8
votes
1
answer
2k
views
Does the attacker need to be on the same network to carry out a deauthentication attack?
I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?
- 83
0
votes
0
answers
6
views
Wifi Adapter not listing any wifi networks [migrated]
I am a beginner in ethical hacking. I bought a qualcomm atheros ar9271 wifi adapter. When I connected it in Windows 10, it shows the below list of wifi networks.
But when I go to kali linux, and put ...
0
votes
0
answers
14
views
Does Android support Wi-Fi Management Frame Protection? [migrated]
I am trying to find out whether Android supports Wi-Fi Management Frame Protection.
From my understanding, this is standardized in IEEE 802.11w, so if Android supports that, it also supports MFP.
...
- 111
0
votes
0
answers
44
views
Technical details behind how a malware-infected device infects other devices on the same network?
I'm a security student and for one of my projects, I'm trying to learn the technical details behind a malware-infected device infecting other devices on the same network. I can see so much content ...
- 23
0
votes
4
answers
244
views
Is Wifi Penetration Testing Dead?
"I hack your Wifi in 5 Minutes" still seems to be a hot topic on youtube in 2023, atleast on beginner channels like David Bombal. However, is there still any real world application? Even ...
- 1
1
vote
2
answers
91
views
Prevent device from seeing WiFi networks for geolocation
This is something I was wondering while trying to improve my privacy.
Mobile devices tend to use geolocation based on WiFi networks they find available (thanks to evil Google...).
One could use ...
- 111
0
votes
2
answers
73
views
Can employer view images in email on personal device in personal email account over wifi?
Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi.
It was mail from a ...
0
votes
0
answers
15
views
Does the client know about the salt used for checking his password on a WPA2 wifi network? [duplicate]
I don't understand how the client is able to send his password secretly without knowing the salt.
- 101
2
votes
0
answers
61
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 243
2
votes
2
answers
104
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 51
1
vote
2
answers
76
views
What is better for security when using virtualbox?
I have a virtual machine running on Virtualbox on my host OS.
I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
- 589
15
votes
1
answer
7k
views
Can my university see the downloads from a Discord application when I use their Wi-Fi connectivity?
I didn’t use a VPN, and I am asking myself if my university can see the downloaded files or even the fact that I opened the Discord application to download.
- 159
3
votes
0
answers
166
views
Difference between OSEN and OWE for secure open Wi-Fi
I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
- 131
1
vote
3
answers
111
views
Why does having default router credentials pose a risk? [duplicate]
When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
0
votes
0
answers
114
views
Trying to understand EAP TLS handshake between a client and an access point when it fails
I traced a handshake between a client and an access point trying to connect to our WPA2 enterprise wifi network with Wireshark. I'm especially interested in how the handshake works when the server ...
0
votes
2
answers
130
views
My Linux Mint just accessed a wifi network WPA2 without knowing the password [closed]
I brought my personal notebook to work. Asked the IT technician to access the WiFi on it (it's a federal institution of health research, lots of biological risks involved). Then he noticed that the ...
1
vote
1
answer
30
views
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file
Does i need vpn to update/upgrade packages on fedora or debian if https is configured in sources file ?
Can packages be replaced by malicious ones through wifi attacks like fraggattacks ?
- 13
3
votes
0
answers
340
views
Is WPA3 mixed mode less secure than pure WPA3?
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
- 143
1
vote
0
answers
81
views
What damage can a malicious wifi hotspot cause? [duplicate]
I've just seen a Youtube video with an advertisement for NordVPN in which they claim that NordVPN would protect passwords when people are on potentially malicious coffee shop WLAN.
That seems strange ...
- 3,912
0
votes
0
answers
39
views
Android Device Suspicious SSID probes
Have the latest nightly build of kismet running on both the master (LXC container) and a drone (running on a Raspberry PI 4 using the 64bit version of Raspberry PI OS)
The drone server is using a mix ...
0
votes
2
answers
141
views
Is dual boot the best/effective way to access a public Wi-Fi?
On Campus we have free Wi-Fi, specifically, Eduroam which needs student credentials to be accessed (each student has its own credentials).
One thing that triggered me was that no certificate is ...
- 103
0
votes
2
answers
382
views
How does the option to “use system certificates” for a wifi login vary from choosing a specific certificate?
This is concerning an android device (not sure if that information helps, since Apple works differently).
When logging into a wifi network, there will be sections that ask for different information. ...
- 27
0
votes
1
answer
170
views
What are the implications of the “do not validate” message for wifi network certificate?
I know a year ago when signing into school wifi there were a few options. First time I had to sign into a school wifi, so I did not understand the difference. Ended up choosing a wireless option. One ...
user282383
0
votes
2
answers
161
views
Are my Facebook messages or Instagram DMs visible (aside from FB and IG) while using a local wifi?
If I am in a place (not at home) such as an educational or work environment and use their WiFi and send or receive Facebook messages or Instagram DMs, are my messages visible to the IT admins of that ...
user282383
1
vote
2
answers
158
views
Can any program discover my precise geolocation?
While browsing the internet on my laptop, I've allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked ...
- 11
5
votes
1
answer
260
views
Free messaging (but not images, video, etc) on United Airlines free wifi: is it secure?
I recently flew with United Airlines and I used their free messaging wi-fi plan.
I could text my friends on Whatsapp, but I could not send (nor receive) multimedia content like images, videos or audio ...
- 153
0
votes
1
answer
158
views
Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?
I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
- 115
1
vote
2
answers
567
views
Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?
Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
- 155
0
votes
1
answer
111
views
Can a malicious WiFi router open a malicious website without permission?
Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer by simply connecting to it?
What about one with a login page? Can it open the ...
- 31
0
votes
2
answers
174
views
Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data
Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
1
vote
1
answer
116
views
What are the risks of connecting a shared laptop to your Wifi?
My son's school lent him a laptop to access a particular website- which I believe we can't do anyway because somehow it requires an organizational live account.
Can the school see what you are doing ...
- 149
0
votes
0
answers
14
views
HTTPS and Network Safety [duplicate]
Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
- 182
0
votes
1
answer
122
views
Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?
Does Wireshark(packet sniffers in general) let you decrypt someone else's https sites, or only your own? For example if the router is hacked can a packet sniffer give the attacker the ability to ...
- 1
-3
votes
1
answer
148
views
Is it dangerous to share the internet with a hacked phone?
I'm sharing my hacked phone's Wifi connection with tethering, so my data travels trough it from my PC. I'm using VPN both on PC, and phone.
My phone(facebook account, camera) got hacked, but I made a ...
- 49
0
votes
2
answers
165
views
Is a VPN effective when connected to WiFi network that requires authentication?
I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
0
votes
1
answer
170
views
Landlord wants to share a single 3Gbps fibre to the property line across 4 flats using a mesh network. Should I be concerned?
fibre to the property is being installed in my road for the first time
my landlord doesn't want lots of holes in their building
they acknowledges that FttP is probably necessary going forward
So ...
- 105
0
votes
2
answers
131
views
Slow Loris Attack Wi-Fi variant
I watched a Computerphile video. In the end, Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down because ...
- 3
-2
votes
1
answer
144
views
Trying to decrypt my home network
I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
- 99
0
votes
0
answers
38
views
Hijacking of sessions: public unencrypted network vs public “password” protected network
What, if any, functional security difference exists between having an unsecured “open” public wifi and one that uses a publicly available password? An example of the latter is: a wifi with SSID “...
- 101
1
vote
1
answer
99
views
Infecting laptop through a nearby Wi-Fi network?
Can a laptop get a virus through a Wi-Fi network with connected infected machines without connecting to the network (just by being withing the reach of the network signal and sensing it)? And vise ...
- 43
0
votes
1
answer
85
views
How secure is the Wyze Cam? How easily could an attacker gain access to it? [closed]
I recently put up a Wyze Cam, a brand of Wi-Fi security camera, and I am curious as to how (in)secure it is. I heard that the Wyze company servers got breached once before. How easily could an ...
- 37
1
vote
1
answer
116
views
What are the best ways to block ISP from spying on you
My dad keeps trying to log everything I do with the WiFi, I've gotten a VPN and use HTTPS everywhere, But I'm not completely sure it worked.
Is there any other good things to use?
Or is this enough, I'...
- 11