Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
0 votes
1 answer
51 views

Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?

I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
user avatar
  • 115
0 votes
1 answer
72 views

Are bandwidth sharing apps such as peer2profit, IPRoyal and PacketStream risky?

Apps like peer2profit, IPRoyal and PacketStream allow you to sell your unused internet bandwidth to others for passive income. Supposedly you could earn about 30 to 75 dollars a month from using these ...
user avatar
  • 145
-1 votes
0 answers
41 views

Is 802.11ac Security “beefed up” Connected to Wi-Fi 6

We have been slowly upgrading laptops at the office; we do use VPNs per device (software) to help “encrypt” out of date Wi-Fi adapters. Should we upgrade network cards or dongles to a newer technology ...
user avatar
0 votes
1 answer
59 views

Can a malicious WiFi router open a malicious website without permission?

Can a malicious WiFi router that doesn't have a login page open a malicious link without my consent to hack my computer if I simply connect to it? What about one with a login page? Can it open the ...
user avatar
0 votes
1 answer
61 views

Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data

Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
user avatar
1 vote
1 answer
83 views

What are the risks of connecting a shared laptop to your Wifi?

My son's school lent him a laptop to access a particular website- which I believe we can't do anyway because somehow it requires an organizational live account. Can the school see what you are doing ...
user avatar
0 votes
0 answers
14 views

HTTPS and Network Safety [duplicate]

Is any network safe to use so long as you are using https on the actual trusted site? For example, connecting to your banking info over plane or coffee shop wifi (assuming no one can see your screen, ...
user avatar
  • 142
0 votes
1 answer
94 views

Can Wireshark or other packet sniffers be used to decrypt https sites of someone else?

Does Wireshark(packet sniffers in general) let you decrypt someone else's https sites, or only your own? For example if the router is hacked can a packet sniffer give the attacker the ability to ...
user avatar
  • 1
-3 votes
1 answer
129 views

Is it dangerous to share the internet with a hacked phone?

I'm sharing my hacked phone's Wifi connection with tethering, so my data travels trough it from my PC. I'm using VPN both on PC, and phone. My phone(facebook account, camera) got hacked, but I made a ...
user avatar
  • 19
0 votes
2 answers
71 views

Is a VPN effective when connected to WiFi network that requires authentication?

I pay monthly for a VPN. However, I browse online while connected to my university WiFi which requires authentication to use. The WiFi is open (no password directly) but when someone connects to it a ...
user avatar
0 votes
1 answer
150 views

Landlord wants to share a single 3Gbps fibre to the property line across 4 flats using a mesh network. Should I be concerned?

fibre to the property is being installed in my road for the first time my landlord doesn't want lots of holes in their building they acknowledges that FttP is probably necessary going forward So ...
user avatar
  • 105
0 votes
0 answers
28 views

Slow Loris Attack Wi-Fi variant

I watched a Computerphile video. In the end Dr. Bagley talked about the fact that a router can only receive/send a packet at a time, so if one device is slow it will slow every device down, because ...
user avatar
-1 votes
1 answer
113 views

Trying to decrypt my home network

I've put my wireless card in monitor mode following this tutorial. After that, I started monitor my wifi home and, after a few seconds, I stop it. Every packet was crypted (obviously), so I follow ...
user avatar
  • 101
0 votes
0 answers
25 views

Hijacking of sessions: public unencrypted network vs public “password” protected network

What, if any, functional security difference exists between having an unsecured “open” public wifi and one that uses a publicly available password? An example of the latter is: a wifi with SSID “...
user avatar
  • 101
1 vote
1 answer
96 views

Infecting laptop through a nearby Wi-Fi network?

Can a laptop get a virus through a Wi-Fi network with connected infected machines without connecting to the network (just by being withing the reach of the network signal and sensing it)? And vise ...
user avatar
0 votes
1 answer
63 views

How secure is the Wyze Cam? How easily could an attacker gain access to it? [closed]

I recently put up a Wyze Cam, a brand of Wi-Fi security camera, and I am curious as to how (in)secure it is. I heard that the Wyze company servers got breached once before. How easily could an ...
user avatar
1 vote
1 answer
100 views

What are the best ways to block ISP from spying on you

My dad keeps trying to log everything I do with the WiFi, I've gotten a VPN and use HTTPS everywhere, But I'm not completely sure it worked. Is there any other good things to use? Or is this enough, I'...
user avatar
  • 11
0 votes
0 answers
33 views

Are there some routers that have WPS, but without a fixed Pin?

My router only seems like to support the push button method, but I thought every router with wps has a fixed wps pin, or am I wrong?
user avatar
25 votes
4 answers
5k views

Identification of a laptop using a spoofed WiFi MAC address

I own a small coffee shop in a highly-populated area. We've noticed that several computers are connecting to our WiFi network using spoofed MAC addresses (e.g. 11:22:33:44:55:66). Is there any way of ...
user avatar
0 votes
1 answer
97 views

WPS - How to get all valid pins?

There are 10⁷ elements in WPS pin space, because one of the 8 digits is used as the checksum. But the AP validates each half separately, resulting in 11,000 valid pins. Is it possible to generate all ...
user avatar
  • 101
-1 votes
1 answer
103 views

Malware from Android text?

Lots of questions! I clicked a scam USPS link on my phone while half asleep. The website loaded and a small window popped up immediately and I quickly backed out of my browser but briefly saw the site ...
user avatar
2 votes
2 answers
274 views

If someone knows your wifi password can they hack your router?

What exactly can someone do if they know your Wifi password? Can they only see which sites you visit or can they do more? Are they able to hack(router) and do malicious things with your router just by ...
user avatar
0 votes
0 answers
170 views

Getting WPA handshake instead of PMKID

Similar to PMKID found , but it should be WPA handshake I notice when I run aircrack-ng with the saved .cap file it does not properly test the keys as it normally would with a WPA Handshake found. Any ...
user avatar
0 votes
0 answers
28 views

What can a malicious user do with a shared android tablet on a corporate network via connected to corp WIFI?

We are deploying android tablets with a shared pin for users in an office. If the device was stolen or in the hands of a hacker, what can a hacker do on the network (realistically)? Android does NOT ...
user avatar
0 votes
0 answers
46 views

Overlap between Wired vs WiFi vulnerabilities

This is a fundamental question, but, I'm interested in understanding the "venn diagram" of attack vectors between wired and Wi-Fi connections. What are the attacks that both wired and Wi-Fi ...
user avatar
0 votes
0 answers
36 views

Why does the authenticator send the first message in 4-way handshake?

I was reading a similar question However, my question is that why can't it be the other way around? Why can't the client start the 4-way handshake by sending the first message? Wouldn't it be the same ...
user avatar
1 vote
1 answer
110 views

What is the most secure internet access option for Android phones?

My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have: The phone ...
user avatar
  • 33
0 votes
1 answer
40 views

Collect traffic from mobile app to IoT device

I have a mobile app that connects to a IoT device over port 8888 to send commands. I'm not sure how to intercept this. MITMproxy was not able to capture the data as the app would not load behind a ...
user avatar
0 votes
0 answers
43 views

What's the security implications of briefly connecting to a public wifi

Case study: Amazon Fire Stick accidently connects to a BT (UK "ISP") Open WiFi with no security. Upon connecting, the login screen of BT portal is presented, however, the user realising ...
user avatar
1 vote
3 answers
153 views

If I only connect through encrypted protocols like TLS, is there still a risk over an insecure wifi?

Assuming the attacker can read all the traffic (he cracked my WPA2 for example), is there still something he can do if i'm only connecting through TLS and similar protocols ?
user avatar
  • 111
0 votes
1 answer
112 views

How is WPA-PSK authentication done?

When I try connecting to wireless networks (with no RADIUS server), I enter the password and it goes through an authentication process. After the station successfully connects to the access point, a 4-...
user avatar
0 votes
1 answer
55 views

Why do we need to connect to a network to be able to read all packets while packet sniffing?

I can't understand much about packet sniffing operation when it's in a network. Well, packets are encrypted with PTK to prevent sniffing from monitor mode but when we are in client mode and we ...
user avatar
3 votes
1 answer
136 views

Same network steal data?

Say my home network has a wifi-password and my friends are connected to it (since I gave them my wifi-password). Is it possible for me to read their data transfer? If yes, then it would also be ...
user avatar
  • 33
0 votes
0 answers
20 views

WiFi MAC spoofing [duplicate]

I've got a question regarding WiFi security and MAC spoofing: let's say Alice has a friend Bob and she gives him access to her WiFi. For this, she tells him the WiFi password and Bob logs into her ...
user avatar
  • 125
1 vote
1 answer
124 views

Securing home network when not controlling the router

I have just moved to a new place and the router is controlled by the managing company, what can I do to improve my security and my anonymity under this constraint?
user avatar
  • 13
0 votes
0 answers
74 views

What are possible attacks if am connecting to public WiFi using repeater, through Ethernet or /and if the router's firmware is hacked

What are possible attacks if am connecting to public WiFi using repeater, through Ethernet or /and if the router's firmware is hacked, supposing am running a Debian system ,blocking inbound ...
user avatar
  • 35
0 votes
0 answers
25 views

Can someone on same wifi access my computer? [duplicate]

I was connected to a hotel wifi and airport wifi last week. Some of the files in my Downloads folder now has been compromised (soft keys stolen). Can someone connected to same wifi gain access to my ...
user avatar
  • 101
0 votes
1 answer
127 views

Does OpenSSL support EAP-TLS privacy

Does OpenSSL support EAP-TLS privacy? It's an optional feature part of rfc5216, section 2.1.4.
user avatar
1 vote
2 answers
136 views

What are the risks of using an unpatched device connecting to the internet infrequently?

My grandfather is interested in buying a smart tablet. He never had any personal computer or any internet connection. He wants to use his tablet solely to read the newspaper, as they no longer deliver ...
user avatar
3 votes
3 answers
257 views

Are TLS v1.3 connections over open Wi-Fi secure?

If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic. But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
user avatar
3 votes
2 answers
162 views

Is it foolish to trust a Wi-Fi network just because it uses a specific recognized SSID?

This article in the Avira (part of NortonLifeLock) security blog discusses (vaguely) security risks of public Wi-Fi. The article states: Man in the middle attacks are also a very prominent threat, ...
user avatar
0 votes
0 answers
71 views

How can WIPS block unauthorized AP with PMF enabled?

To my knowledge, WIPS(wireless intrusion prevention system) prevents wireless devices connecting to unauthorized AP by sending de-authentication frames. If 802.11w Protected Management Frame(PMF) is ...
user avatar
  • 101
0 votes
0 answers
140 views

How wifi network MITM works?

I have seen a lot of tutorials showing how to MITM a network using various tools. But it usually says that we require a network adapter with monitor mode options. I own my wifi router and can connect ...
user avatar
0 votes
1 answer
100 views

Can a wifi Access Point be reconfigured to receive other radio signals?

Say we have a remote transmitter that is not connected to a wifi router (neither wirelessly nor by cable), but which transmits information using electromagnetic waves. Examples include walkie-talkies, ...
user avatar
  • 1
2 votes
2 answers
283 views

Is using my address for WIFI SSID a bad idea?

I live in a location which is semi-rural. I also share this Internet access with some people nearby. Although bandwidth is a bit limited (VDSL), other then those imposed by the connection speed ...
user avatar
  • 593
0 votes
1 answer
363 views

Airodump-ng shows AP as OPN and WPA2 at the same time. What does it mean?

The result of airodump-ng lists some AP's as both OPN and WPA2. How does the authentication work in that case? 12:34:56:78:AB:CD, 2011-09-09 15:29:47, 2022-10-21 16:09:05, 1, WPA2 OPN, CCMP, MGT, -75,...
user avatar
0 votes
2 answers
130 views

Are there any further security considerations when joining a public wifi network other than firewall and anti-virus?

If I use my laptop on my company wifi network to use the internet, what access has the company to the laptop hard drive and information on it? The company wifi is there for customers and employees (...
user avatar
  • 1
1 vote
0 answers
94 views

How can someone using public wifi be deanonymized?

Say someone wants to send a document overseas while living in a hostile country. He uses tor over public wifi. What are some ways he can be tracked if he uses a burner laptop and public wifi? Few ways ...
user avatar
0 votes
1 answer
111 views

Unknown WiFi Network

For background, I am being sued by unethical people who would do anything. I live in a rural area and in the network list on my phone and laptop, no neighboring networks appear. Only our own plus our ...
user avatar
  • 1
1 vote
1 answer
172 views

How to handle a router from an apparently security-indifferent ISP with no possibility to switch?

My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
user avatar

1
2 3 4 5
29