Security for 802.11 wireless networks.
12
votes
3answers
1k views
Can someone without the WiFi login and no physical access to a router still access it with the admin login?
If you have an router with default login and password for the admin page, can a potential hacker gain access to it without first connecting to the LAN via the WiFi login?
1
vote
1answer
78 views
Can anyone using my wifi see what I'm browsing?
Can anyone using my wifi see what I'm browsing?
I've already read questions and answers about this topic and everybody suggests to use VPN.
I have two questions: is Tor safe for this issue? If I ...
0
votes
1answer
113 views
How dangerous is this Network?
Our school requires everyone to bring their own laptops for homework, etc.
It uses something called 'Genian NAC' to authenticate users.
I can either use Ethernet or Wi-Fi to connect, but both require ...
0
votes
2answers
54 views
After having changed wifi password the client list shows devices, which do not know yet the new password
This applies to spectrum provided modem/wifi router Ubee.
My wifi router's client list showed unknown devices. So I changed the password. These unknown devices were still connected (via wifi, not ...
1
vote
2answers
56 views
public WiFi hotspot-What is leaking at that tiny moment before connecting to a VPN?
When you sign up for a VPN account you also download the service's client,be it for Android, Windows etc but this question is specifically for Android or portable devices connecting through public ...
4
votes
1answer
55 views
Is communication with printers protected?
If someone can break into my home network then they can record anything going over my WiFi network, which is why https is essential and VPN is useful. Now my printer is connected through WiFi, and ...
1
vote
1answer
70 views
How do you sniff a wifi router without connected into it?
I am curious with current technology and tools, are we capable to sniff up and down stream of any open/closed wifi router without connected into it?
4
votes
1answer
120 views
Can hand/finger movements be determined via changes in WiFi signal strength?
On a password generator website I came across the following claim among a list of security tips:
If there are WIFI routers in your home, then it's possible to know the passwords you typed (in your ...
0
votes
2answers
98 views
Have firewall and VPN already, should I buy a mini router to protect my laptop?
I often travel for business and use hotel wifi. I have installed Little Snitch and VPN-Outline for internet security. Should I buy a mini router? Will it keep my computer safer？ Otherwise，with or ...
0
votes
1answer
34 views
KRACK - does the ability to replay broadcast and multicast frames affect all clients in a wireless network?
I apologise if this is a silly question, I just want to make sure I understand the impact of CVE-2017-13078 and CVE-2017-13080 correctly. Is the following assumption true?
If there is just one ...
1
vote
3answers
79 views
Does use of WEP only open the network to attacks in proximity of the router?
I'm learning about security, and discovered my family's router was set to use WEP, with WPS enabled. I've fixed that, but I couldn't give a great answer for why it was necessary, given that we live in ...
0
votes
1answer
60 views
Your connection will not be private - Wi-Fi CA certificate warning message on Android
I try to connect to a Wi-Fi network, Eduroam, using my new Android device. It asks me to provide the CA certificate and warns that otherwise my connection would not be private.
No certificate ...
4
votes
0answers
71 views
How to send Wi-Fi management frames from macOS?
I realise that this question has been touched on before as linked here. However, none of the solutions suggested solved my question and it fails to answer the overarching question of how to send all ...
1
vote
3answers
79 views
Can a rogue wifi network install a CA certificate?
Could an attacker create a false wifi network, then force (either via the user exploitation or other means) CA certificate install to the browser, allowing them to use something such as Burp Suite to ...
4
votes
1answer
73 views
Where does the encryption happen with an encrypted VPN?
I have been trying out ExpressVPN to connect to the internet. I have mostly used this at a coffee shop that I use regularly.
I see this question with answers:
Differences between using Tor browser ...
0
votes
0answers
15 views
wifi hacking: evil twins WPA2-PSK phishing [duplicate]
I have created a Rouge access point using dnsmasq and hostapd with WPA2 configuration with the same SSID as my wifi network. It works fine and clients can connect to my Rouge AP.
The question is: Is ...
2
votes
1answer
61 views
Why doesn't public or open WiFi use unique encryption for each client (like GSM)?
I wanted to ask a networking security question about open or public WiFi.
This question is not a duplicate of Why isn't open WiFi encrypted?
Reading about cellular networks I found out that cellular ...
-6
votes
1answer
115 views
How to disconnect a client from my AP in Kali Linux? [closed]
I want to disconnect a client from my Access Point and I am using Kali Linux, Is there any way to do this?
-3
votes
2answers
160 views
Pen testing wifi networks [closed]
What are the different attack vectors on wifi networks? Regarding recent research I have done, the most common are DOS, MITM, ARP poisoning.
Which tools can I use and steps to follow for conducting ...
3
votes
2answers
130 views
How can I prevent abuse of our public WiFi network?
One of our customers runs a holiday park with <100 users on it.
We currently have a mikrotik in place that prevents torrenting etc, however their line has been cut off as someone there has been ...
0
votes
1answer
63 views
Sniffing WiFi using monitor mode long-term and decrypting
So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark ...
79
votes
8answers
26k views
How is no password more secure than username+password?
Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation's laptop. When I use a personal computer, it asks me for a username ...
0
votes
2answers
51 views
Why arpspoof if you have monitor mode?
I know that you can sniff packets from other computer in network by mitm attack using arpspoof, but why to bother if you can turn on monitor mode and sniff all trafic(if I understand correctly monitor ...
0
votes
1answer
75 views
Does this evidence seem consistent with an intrusion via the VNC server?
I am new to this forum, so apologies in advance if this question does not seem to fall within its scope, or if it seems too long:
On two occasions over the past ~3 weeks, a hacker gained remote ...
0
votes
0answers
22 views
WPA2 IV all zero in EAPOL message of 1,2 and 4
While we know that in the best practice in any AES communication is to not use a constant or all zero IV.
However, when I capture my authentication progress between my STA and AP. I found out that ...
0
votes
1answer
95 views
Does using a router connected to an unsecured WiFi network add security?
If I connect a portable router like GL-AR150 to a public, unsecured Wi-Fi network at a hotel and create my own private, password-protected Wi-Fi network, how much more secure is this compared to just ...
17
votes
3answers
5k views
Is WEP still a thing?
I was studying the Wi-Fi security section for a pentesting certification the other day and there is an extensive part about cracking WEP. Is going in-depth on WEP cracking worth it anymore?
According ...
8
votes
1answer
684 views
Mitigating the new attack on WPA2 involving PMKID
A new attack was discovered which allows cracking a WPA2 passphrase without needing to capture the 4-way handshake. While this doesn't weaken the password itself, it does mean that an attacker can ...
-3
votes
1answer
80 views
Legal advise concerning copyright infringement (BitTorrent) and Wi-Fi hacking [closed]
Someone has hacked into my Wi-Fi and downloaded a film, TV shows and other content over a 2 year period using BitTorrent, I am now being sued by a copyright infringement company.
The TV programs as ...
1
vote
3answers
181 views
Is it possible to hack into secured wifi and download with bit torrent from my IP address?
Is it possible to hack into secured wifi and download using BitTorrent from my IP address? I live in Denmark- if that makes any difference.
We changed to a new WIFI service provider a few years back (...
0
votes
1answer
75 views
Is VPN for notebook in public Wifi/WLAN still recommended?
In many computer magazines I found the recommendation to use a public Wifi only with VPN (of course, you should trust the VPN provider).
Assuming all websites with sensitive data (complete website, ...
1
vote
2answers
145 views
Man-in-the-middle attack by impersonating a hidden SSID
This question deals with whether hiding an SSID makes a given wifi network more or less secure (short answer: neither). On the other hand, I think that a client that saves a connection to a network ...
3
votes
2answers
608 views
Why does a deauth attack work on WPA2 despite encryption?
Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn't the machine know that the message is illegitimate due to the fact that it would ...
0
votes
1answer
95 views
Infect Android device from inside the network without target knowing?
Is it possible to malicious some device in the same network without the user knowing?
there some people use malicious apps but the problem is the user have to see the dialog box application ...
0
votes
1answer
64 views
Is it possible to make a spoofing attack in a access point with same SSID target network?
With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
2
votes
1answer
150 views
Can you detect a wifi pineapple or rogue AP with MAC address?
This posting has some good advice for tracking rogue access points:
Tracking down a rogue access point
The issue I have is that many will not work for a huge deployment. I'd like to build a device ...
21
votes
3answers
4k views
How to check if a Wi-Fi network is safe to connect to?
I always feel scared to connect to hotel, airport Wi-Fi etc. I feel that if the Wi-Fi router is hacked, my personal information can be collected by a hacker. How can I determine if a Wi-Fi network is ...
0
votes
1answer
203 views
How can I decrypt traffic on a WPA encrypted network?
I am connected to a WPA/WPA2 Access Point and I want to sniff all wireless traffic inside that network. How can I decrypt the traffic even though I don't have the pre-shared key?
3
votes
1answer
345 views
How to detect WiFi spoofing? [duplicate]
I have recently become concerned that someone might be spoofing the WiFi network at my office. The network has been really unstable these last few weeks. The password isn't really that secret, and I'm ...
1
vote
2answers
65 views
Wi-fi Certificate Permission and Access to phone/data
There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
0
votes
0answers
39 views
why can't I disconnect stations from router
I have dual booted Kali Linux on my laptop (Lenovo IdeaPad 110) and was trying to crack some wifi passwords using WPA handshake but was unable to capture the handshake as I was not able to disconnect ...
0
votes
2answers
100 views
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
Is it generally safe to disable Windows 10 Proxy Auto-Discovery Protocol (WPAD)?
This might be my only option to try before contacting my ISP which could be quite annoying to do.
0
votes
1answer
83 views
What would be a good contingency plan for a critical WPA2-Enterprise WIFI?
I need to design a contingency plan for a WPA2-Enterprise WIFI network.
In the past we have been designing applications that can work autonomously without internet connection (for example, caching ...
0
votes
1answer
79 views
Are MAC addresses of hosts always visible to other hosts on a WLAN?
Is there a way of completely hiding one's MAC address so it does not appear in the ARP caches of other hosts? Or is periodically changing it the only solution to achieve anonymity with regards to a ...
1
vote
0answers
35 views
How to protect the control environment of my web application? [closed]
I am developing a web application and want to do its setup and control using my personal notebook.
However, the following topics concern me:
1) Enter the platform (includes the login in the control ...
6
votes
2answers
393 views
Securing Apartment Wifi [closed]
I recently moved into a new apartment, and with rent "free fiber connection" was included. I was skeptical, but the building location and proximity to my office was a no brainer. Now I'm regretting it....
-1
votes
1answer
185 views
Can brute force or dictionary attacks be detected when using the WiFi protocol?
Can the WiFi protocol recognize when a brute force or dictionary attack on it is occurring? WiFi gives the user an authentication failed message after entering an incorrect WiFi password several times....
0
votes
1answer
201 views
Using airolib-ng with crunch and then using the file using aircrack-ng gives unexpected result
I'm using airlib-ng and crunch to generate password Database and use that Password Database in aircrack-ng to crack the Captured Handshake of a WPA2 Wireless Network.
Here are my terminal Commands ...
16
votes
3answers
3k views
Is it safe to log into crypto exchange account using coworking space or coffee shop wifi network?
I day trade cryptocurrency and want to start using coworking spaces for faster internet access.
1.a. Is it safe to log into my exchange account using the coworking space network?
1.b. What ...
3
votes
2answers
83 views
Am I supposed to find non-wifi devices in 802.11 frames of WPA2 encrypted wifi?
I recently tuned in on my access point to see what data is visible despite encryption.
Am I supposed to find MAC addresses of my non-wifi clients in the 802.11 frames and is this part of the protocol ...
