Security for 802.11 wireless networks.
1
vote
3answers
91 views
Can an attacker sniff physical network traffic through WiFi?
So, I am wondering - is it possible for an attacker to sniff traffic on an Ethernet connection if they are not physically plugged into the modem/router hardware but they are connected through wifi? In ...
0
votes
0answers
11 views
Protect or Unlock [duplicate]
I am setting up a public WiFi router and recall reading that protecting the connection, but stating the password in the SSID, is better than simply leaving it unlocked. I don't know if I read or ...
0
votes
2answers
538 views
Heartbleed client side attack: What can the attacker obtain? [duplicate]
If I have got this right in my head it would be a simple enough task to combine arp spoofing on a public WiFi to redirect clients to an evil SSL server which sends malformed heartbeat requests or to ...
1
vote
0answers
34 views
Neutralizing or Migitating ARP spoofing once detected
I've seen a few methods to detect ARP Spoofing attacks through code(such as this), and ways to defend against these attacks through software and switches (like arp spoofing protection on LAN). How ...
-1
votes
1answer
54 views
Unknown device accessing my WiFi hotspot? [closed]
My personal hotspot is accessed from an unknown site when I am in my home. Everyone in my home owns apple products but samsung android appears in network in system profiler.
Active services ...
0
votes
1answer
83 views
Why are cryptographic algorithms implemented in the data-link layer in wireless networks?
Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
9
votes
4answers
965 views
What features should I look for in a Wifi card used for wifi snooping / penetration testing?
I'm looking to purchase a wifi card to help me learn about wifi network penetration testing and other associated issues but I was wondering if there were any features of a wifi card I should look out ...
0
votes
2answers
131 views
If someone knows my wi-fi password, will he know what I am doing? [duplicate]
I just told my friend my Wi-Fi password, will he know what I am doing even though he does not connect to my home internet?
-1
votes
4answers
102 views
My router is opened to the internet [closed]
I typed in my IP into my address bar and my router admin page came up. Is this safe? How can I disable it? It's Linksys Smart Wifi
0
votes
1answer
17 views
Safely creating and communicating within a fully decentralized p2p network
I'm not entirely sure if this is the right place to ask this, and I'm also slightly fuzzy on how the p2p system works, so correct me if I'm wrong.
I've been looking into the practical implications of ...
0
votes
3answers
95 views
Intercepting wifi traffic
So people always talk about how if you use http over a shared wifi hotspot, people will be able to see your unencrypted data, but I have never been able to make the direct connection from a network ...
1
vote
0answers
47 views
Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
5
votes
2answers
106 views
Does WiFi SSID spoofing also affect known password protected networks?
I read quite a bit from Troy Hunt about spoofing WiFi SSIDs and luring devices to connect to them.
When the Pineapple device sees a probe request it will create a WiFi with the probed SSID. The naive ...
1
vote
1answer
115 views
How the shopkeepers are getting MAC address of wifi enabled smartphones
It is clear that some big mall's are tracking all the wifi enabled mobile phones before they are connected to the network..how can it been done?
I have the similar issue.. how to get the MAC address ...
2
votes
3answers
129 views
How to detect the “Hello packets” sent by a wifi enabled smartphone
Actually I have a case where I should able to detect the mobile phones and get some data about the device available in my network range without connecting to the network.
I have seen somewhere that a ...
4
votes
5answers
163 views
Can the wifi administrator in a shared office see mail sent through outlook?
I am hot desking in the same office as a potential competitor & would be using the same wifi. The building owner runs the competitor company.
My question is, can the wifi administrator see mail I ...
4
votes
2answers
97 views
Should I set different passwords for different Wi-Fi bands?
My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them.
Now, since cracking just one of the two means that the attacker would ...
2
votes
2answers
118 views
Wireless Positioning System (WPS) works without Internet?
As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
2
votes
2answers
93 views
Are there any known attacks for a laptop with the wifi connection turned off?
I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
0
votes
1answer
57 views
wifi devices connected even if they give a wrong password, how can i use this vulnerability
I have an access point that subscribes in the list of connected devices all the devices that try to connect to it, even if they give a wrong password.
The device does not give them an IP address but ...
1
vote
1answer
46 views
How to configure Kismet to redetect same BSSIDs in a loop?
So I am working on a tool to detect any wifi device using Kismet.
When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
2
votes
0answers
40 views
What causes wifi network connections to timeout? [closed]
i was wondering what actually causes wifi network connections to timeout. for instance, say my laptop is connected to my wifi and i yank the battery out such that my laptop can't send any proper ...
3
votes
1answer
85 views
WPA2 enterprise credentials involved in encryption?
Since encryption keys are session-based in WPA2 enterprise, if person A obtains person B's credentials, will person B's encryption key still be safe? Is there any way person A could use person B's ...
1
vote
1answer
85 views
Internet monitoring and DNS encryption
If someone hides their DNS traffic by encrypting it with a service such as OpenDNS's DNSCrypt, would you still be able to see which URLs they're viewing?
Also, if that person uses HTTPS 100% of the ...
8
votes
2answers
531 views
What is the purpose of changing the default SSID?
Yesterday I got a cable modem, and on the back of the modem there is a small sticker with the name of the default SSID, which looks like Vendor-A11 and the default Pre-Shared Key, which is a long ...
0
votes
1answer
113 views
how to protect my linux pc from wifi sniffing
I have a wifi shared connection with other flatmates and I'd like to know how can I protect my Debian pc from being sniffed. Should I use a wifi anti sniffer to detect if any wifi card is in ...
0
votes
1answer
146 views
WPA/PSK Dictionaries
So i have been reading some articles on WPA/PSK encryption,
And one said that the hash is calculated like this:
Key = PBKDF2(passphrase, ssid, 4096, 256)
Where PBKDF2 is a standardized method ...
1
vote
3answers
86 views
Why does changing physical router not warn of possible man in the middle attack?
Situation
I swapped out a dead router at home today. I setup the new router with the same SSID and encryption settings. The devices on my network acted like nothing had happened and are happily ...
1
vote
3answers
102 views
Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?
Mobile devices like smartphones and tablets have the feature to autoconnect to wireless networks of known name. The same is with laptops and other hardware using WPA2. Is it possible to:
a. Obtain ...
1
vote
2answers
133 views
Idea for hiding your mobile phones' location, and still be able to place and receive calls. Any suggestions?
The diagram below is a thought experiment that could provide a certain level of privacy to mobile (smart)phone users, beyond what they currently have. Some of it is purely theoretical, but it should ...
2
votes
2answers
146 views
Exploiting free WIFI security
So I was watching some Backtrack learning videos and similar stuff, and noticed how there is always talk about getting people's information. For example if someone using unsecured WIFI you can see ...
2
votes
2answers
362 views
IP cameras or webcams and wifi/network security
If I have a:
router with stateful packet inspection turned on, plus WPA2 security on the wifi network
an IP camera or webcam connected to this Wifi network
Is there any way to ensure that:
...
7
votes
3answers
452 views
How to check if wifi is safe while travelling?
I'm quite a bit of a traveller. So i tend to just stay with my smartphone and sometimes notebook. I'm not a security expert but i would like to check how to know if wifi is safe to use. For example, ...
1
vote
1answer
689 views
Why is a CA certificate required for EAP-TLS clients?
When setting up clients with WPA2 EAP-TLS, most clients (ie: my phone, my computer) require both a client public/private keypair (for obvious reasons) and a certificate authority certificate.
It's ...
0
votes
2answers
230 views
If I am not logged into my company's WIFI, can they view my information? Or am I transmitting?
I was at work using my phone. We have an open WIFI, but I did not use it to go online. I was wondering, can my information be viewed or was I transmitting data even though my phone said I was not ...
3
votes
2answers
476 views
Wifi pineapple “Karma”
if a wifi pineapple does a karma attack and a client connects to it would you get the password((for the original wifi) or would the client just connect to you? (Side question is there anyway to stop ...
0
votes
1answer
163 views
Shall I enable 'send all traffic over VPN' on my Mac?
I want my Mac to be as secure as possible, but I don't know if the send all traffic over VPN option is safe or not. Please can someone explain if it is more secure to enable it or not.
0
votes
1answer
1k views
How much can someone see from my iPhone by connecting to my wifi
How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
3
votes
1answer
153 views
Securing wifi with encryption
So I have been hearing that using WPS Pin is not secure at all and that there are available downloads that can brute force attack the pin until it uncovers it depending on what encryption you use. I ...
1
vote
1answer
107 views
MiTM not working --rejected by router?
I have been attempting to run a MiTM on a very old XP SP3 computer. I have attempted it with 3 products, as listed below:
Wireshark: Traffic from the computer did not even show up. (I did see traffic ...
-1
votes
1answer
57 views
Why not plug DeAuth
They way I understand DeAuth-ing a user on a wireless network is this: The attacker pretends to the AP he is the user and to the user he is the AP. He then tells the AP (as a user) "I need to ...
2
votes
1answer
135 views
2 AP (TP-LINK) - bridge mode - security issues
I connect two TP-LINK APs (TL-WA901ND) together over bridge-mode. It's all working fine but there is no option to set up some wifi-security (WPA/WPA2).
Do I need wifi-security over bridge-mode?
Any ...
0
votes
1answer
169 views
Sniffing 3g network Pockethound
I was wondering if its possible to prevent 3g sniffing. Its not about the security of the information sent over 3g, but being able to use your 3g without anyone able to see traffic. There are machines ...
2
votes
0answers
178 views
WiFi Direct/WPS key question
So far, I haven't seen any PoC or real-world attacks against WiFi Direct, but I see the potential because it relies on WiFi Protected Setup (WPS) for establishing the connection.
Tools like Reaver ...
0
votes
2answers
272 views
Wifi security SSID clarification
I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand.
Is there a best practice for SSID naming?
I know that changing the ...
3
votes
2answers
350 views
Does WPA2 Enterprise mitigate evil twin attacks?
One of the dangers of using WPA2-PSK is the possibility that an attacker may setup another wireless network with the same SSID and even use the same access point MAC address via MAC spoofing. The ...
2
votes
2answers
214 views
How to prevent user's mobile phone position tracked
Trying to follow up this post How to trace a (mobile) phone? , the answers on how to prevent being tracked while you own a mobile phone are: You cant. (even if you use disposable phones etc)
1) Why a ...
2
votes
4answers
450 views
Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?
As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
6
votes
1answer
376 views
Are strong WPA2 passwords “good enough” for WiFi security?
I'm currently using WPA2-PSK with CCMP on my home WiFi network for encryption and security.
I was a big fan of MAC filtering, until I realized that MAC addresses are publicly sniffable in the 802.11 ...
1
vote
1answer
81 views
Are there risks associated with connecting to a public hotspot?
When connecting to a unknown public hotspot, I know that the data transmitted can be captured and, if unencrypted, easily analyzed. But that's not the question here.
I want to know whether the ...
