Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [wifi]

Security for 802.11 wireless networks.

0
votes
0answers
31 views

Difference between commercial hotspots and shared private WIFI

Regarding security, is there any difference between commercial hotspots and shared private WIFI, in particular is it possible to use a VPN with a commercial hotspot ?
2
votes
1answer
74 views

What has to occur for a hacker to monitor traffic from my LAN?

I understand that if you change your network card from managed mode to monitor mode you will be able to monitor and sniff the traffic of your local network plus all the access points around you. My ...
1
vote
2answers
110 views

A computer on the public network I was using was penetrated at a codejam. Am I at risk?

I was at a code jam today for 12 hours. At the end of the day as I was leaving, one of the programmers claimed his computer was hit with a reverse shell attack. He was voicing this as I was ...
1
vote
1answer
49 views

Can IMEI be tracked through IP address if cellular never activated on device?

Just want to know if an iPad can be tracked via IMEI over IP address if the device is NOT activated on a cellular network. The device is only used on a WiFi network and has never/will never be ...
2
votes
2answers
74 views

Can I see the MAC address of a router on an encrypted Wi-Fi network?

Say that I am within range of a Wi-Fi network that is encrypted using WPA2, but I don't know the password. Is it possible for me to learn the MAC address of the Wi-Fi router that is broadcasting the ...
0
votes
2answers
26 views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
0
votes
0answers
22 views

Get devices from multiple access points [closed]

I am building a project which requires me to get all devices that are connected to my WAP(Wireless Access Points). I am using PHP to build this project and I've tried nmap and ping to list the devices....
-1
votes
1answer
78 views

Can my overly suspicious boyfriend see my info and accounts and more on my laptop or phone? [closed]

I live at home with a caring but paranoid overly suspicious boyfriend who has unfortunately been burned too many times in life by others. He never believes where I am, always rushes me etc. The 6-7 ...
0
votes
1answer
123 views

Home wifi: is it typically possible to prevent WLAN devices from selecting their own IP address?

Motivation: I want to be able to create different outbound traffic rules for different devices on my network e.g. my laptop can create VPN tunnels, whereas my kids' laptops can only connect DNS/HTTP/...
0
votes
0answers
18 views

Corporate wifi and browsing history [duplicate]

I came to work with my personal laptop and smartphone and used both while connected to the corporate wifi. Is it possible that my browsing history or messages (produced after disconnecting from the ...
0
votes
0answers
22 views

Options for adding WEP / WPA to my home network [migrated]

Recently I had to upgrade my router with my ISP. When I got home I was shocked to discover that WEP / WPA features were removed, and I need them for my courses in wireless hacking. My home phone is ...
0
votes
0answers
19 views

Can Wifi HotSpot download a file automatic right after connecting?

Can HotSpot fishing android devices by connecting to the wifi and automatic download a file? or even send a file from the HotSpot owner to the victim without he knowing or do anything?
0
votes
0answers
67 views

A server that must only serve itself but listens on all network interfaces

Imagine a server that is only supposed to serve itself (restricted to TCP by a standard). Naturally, it would only listen on the loopback interface and never worry about attacks from outside networks. ...
0
votes
3answers
124 views

Can information sent over unencrypted http still be seen if I'm on an encrypted wifi?

I was booking a haircut online and noticed that when they made me sign up for an account, the credentials were not being encrypted (or at least that's what firefox was telling me). It's not a huge ...
1
vote
0answers
43 views

How can a 802.11 client verify the authenticity of an AP it is trying to connect to?

With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
1
vote
1answer
82 views

Is it possible to push a device from a private WiFi in order to decoy it to a public WiFi?

Regarding How to force clients to connect to WiFi automatically? and this situation: my neighbour is connected to his private Wi-Fi I have a Pineapple Nano broadcasting public SSID's (McDonald, ...
0
votes
1answer
79 views

Sniffing router's WiFi traffic

Let's say someone already has my key and is logged in my wifi network and also has access to my router. Catching the four-way handshake for the hacker is important to see my web traffic. If he wants ...
0
votes
1answer
80 views

Can smartphone app be hacked by wifi?

We all know that it is possible to spy on other people in the same wifi network, even if it is difficult. What about apps, like Facebook app for Android? Is it similar to an https website so it is ...
8
votes
3answers
2k views

Can my school see exactly what I’m doing? [duplicate]

My school requires us to install digicert global root CA and digicert sha2 secure server to access to the secure and guest WiFi onto our personal devices. Does this mean that the school can see the ...
1
vote
0answers
40 views

How does fake authentication work with no other clients connected to the AP? (aireplay-ng)

I was reading a tutorial about how to hack a WEP network that has no other clients connected to the AP. It says that fake authentication must be used and it appears to work, but I don't understand how ...
-1
votes
1answer
217 views

Can a school find my personal computer if I'm on their wifi? [closed]

I know that they can find my search history on their wifi and some websites (reddit etc) are blocked, but will they be able to know it was my computer specifically?
0
votes
0answers
37 views

Network attack vectors on android - an overview

I'm on vacation and - for the first time in a while - have not had the option to circumvent a public (unencrypted) WiFi for internet access. The hotel is remote (no cellular access) but has a large ...
0
votes
0answers
48 views

Wifi Pineapple - How would Karma or PineAP silently log probes from individual clients, *without* broadcasting beacons?

With the intention of silently gathering information about a client's environment, how would one utilize Karma and PineAP to log probes but not broadcast / reply with beacon packets? In the test lab, ...
1
vote
1answer
164 views

Securely using a WiFi network with weak password

My roommate's wifi password is just the ssid with a single-digit number appended. The ssid itself is a word that appears in the dictionary also with a single-digit number appended to it. E.g. his ...
0
votes
0answers
26 views

Can EAP/PEAP protocols be re-used for wired AP authentication

If i require a java application software to connect to multiple access points (in various organization) can i re-use the current EAP protocols in access points to connect to them? For example, today ...
-4
votes
1answer
106 views

Can code be transmitted through computers’ antennas? [closed]

I have an Acer Aspire E15 5-575. I removed its WiFi card, while kept its black and white antennas intact. I did this to avoid being discovered by long or short range wireless transmissions, wanting to ...
50
votes
5answers
11k views

Can someone without the WiFi login and no physical access to a router still access it with the admin login?

If you have a router with default login and password for the admin page, can a potential hacker gain access to it without first connecting to the LAN via the WiFi login?
1
vote
1answer
187 views

Can anyone using my wifi see what I'm browsing?

Can anyone using my wifi see what I'm browsing? I've already read questions and answers about this topic and everybody suggests to use VPN. I have two questions: is Tor safe for this issue? If I ...
1
vote
2answers
175 views

How dangerous is this Network?

Our school requires everyone to bring their own laptops for homework, etc. It uses something called 'Genian NAC' to authenticate users. I can either use Ethernet or Wi-Fi to connect, but both require ...
1
vote
2answers
83 views

After having changed wifi password the client list shows devices, which do not know yet the new password

This applies to spectrum provided modem/wifi router Ubee. My wifi router's client list showed unknown devices. So I changed the password. These unknown devices were still connected (via wifi, not ...
2
votes
2answers
90 views

public WiFi hotspot-What is leaking at that tiny moment before connecting to a VPN?

When you sign up for a VPN account you also download the service's client,be it for Android, Windows etc but this question is specifically for Android or portable devices connecting through public ...
4
votes
1answer
70 views

Is communication with printers protected?

If someone can break into my home network then they can record anything going over my WiFi network, which is why https is essential and VPN is useful. Now my printer is connected through WiFi, and ...
3
votes
2answers
104 views

How do you sniff a wifi router without connected into it?

I am curious with current technology and tools, are we capable to sniff up and down stream of any open/closed wifi router without connected into it?
5
votes
1answer
199 views

Can hand/finger movements be determined via changes in WiFi signal strength?

On a password generator website I came across the following claim among a list of security tips: If there are WIFI routers in your home, then it's possible to know the passwords you typed (in your ...
0
votes
2answers
103 views

Have firewall and VPN already, should I buy a mini router to protect my laptop?

I often travel for business and use hotel wifi. I have installed Little Snitch and VPN-Outline for internet security. Should I buy a mini router? Will it keep my computer safer? Otherwise,with or ...
0
votes
1answer
56 views

KRACK - does the ability to replay broadcast and multicast frames affect all clients in a wireless network?

I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true? If there is just one ...
1
vote
3answers
87 views

Does use of WEP only open the network to attacks in proximity of the router?

I'm learning about security, and discovered my family's router was set to use WEP, with WPS enabled. I've fixed that, but I couldn't give a great answer for why it was necessary, given that we live in ...
0
votes
1answer
257 views

Your connection will not be private - Wi-Fi CA certificate warning message on Android

I try to connect to a Wi-Fi network, Eduroam, using my new Android device. It asks me to provide the CA certificate and warns that otherwise my connection would not be private. No certificate ...
4
votes
0answers
98 views

How to send Wi-Fi management frames from macOS?

I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
1
vote
4answers
125 views

Can a rogue wifi network install a CA certificate? [duplicate]

Could an attacker create a false wifi network, then force (either via the user exploitation or other means) CA certificate install to the browser, allowing them to use something such as Burp Suite to ...
4
votes
1answer
104 views

Where does the encryption happen with an encrypted VPN?

I have been trying out ExpressVPN to connect to the internet. I have mostly used this at a coffee shop that I use regularly. I see this question with answers: Differences between using Tor browser ...
0
votes
0answers
18 views

wifi hacking: evil twins WPA2-PSK phishing [duplicate]

I have created a Rouge access point using dnsmasq and hostapd with WPA2 configuration with the same SSID as my wifi network. It works fine and clients can connect to my Rouge AP. The question is: Is ...
3
votes
1answer
68 views

Why doesn't public or open WiFi use unique encryption for each client (like GSM)?

I wanted to ask a networking security question about open or public WiFi. This question is not a duplicate of Why isn't open WiFi encrypted? Reading about cellular networks I found out that cellular ...
3
votes
2answers
134 views

How can I prevent abuse of our public WiFi network?

One of our customers runs a holiday park with <100 users on it. We currently have a mikrotik in place that prevents torrenting etc, however their line has been cut off as someone there has been ...
0
votes
1answer
74 views

Sniffing WiFi using monitor mode long-term and decrypting

So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark ...
79
votes
8answers
26k views

How is no password more secure than username+password?

Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation's laptop. When I use a personal computer, it asks me for a username ...
0
votes
2answers
60 views

Why arpspoof if you have monitor mode?

I know that you can sniff packets from other computer in network by mitm attack using arpspoof, but why to bother if you can turn on monitor mode and sniff all trafic(if I understand correctly monitor ...
0
votes
1answer
84 views

Does this evidence seem consistent with an intrusion via the VNC server?

I am new to this forum, so apologies in advance if this question does not seem to fall within its scope, or if it seems too long: On two occasions over the past ~3 weeks, a hacker gained remote ...
0
votes
0answers
32 views

WPA2 IV all zero in EAPOL message of 1,2 and 4

While we know that in the best practice in any AES communication is to not use a constant or all zero IV. However, when I capture my authentication progress between my STA and AP. I found out that ...
0
votes
1answer
120 views

Does using a router connected to an unsecured WiFi network add security?

If I connect a portable router like GL-AR150 to a public, unsecured Wi-Fi network at a hotel and create my own private, password-protected Wi-Fi network, how much more secure is this compared to just ...