We’re rewarding the question askers & reputations are being recalculated! Read more.

All Questions

Tagged with
Filter by
Sorted by
Tagged with
1
vote
1answer
67 views

Capture WiFi AP authentication attempted password

Is it possible for someone who is doing air monitor mode (ex. using airmon-ng) or is using a rogue device to capture attempted authentication on a Wi-Fi AP ? For example, I have a home router WPA2-...
2
votes
0answers
92 views

RF signal Wi-Fi leak [closed]

How can one steal files off a laptop hard drive using RF / Wi-Fi signals? Can it be done with the laptop powered off if there is a battery?
0
votes
0answers
69 views

Network Adapter error Airgeddon

I keep getting an error in Airgeddon when using my Alfa AWUS036ACH network adapter. I launch Airgeddon successfully with all requisite tools installed, select my wlan0 network, put it into monitor ...
0
votes
0answers
112 views

Why doesn't the fluxion attack steal credentials when authenticating to the network?

I ask this question because i am not happy with the answer here In a normal attack such as fluxion. You send DEAUTH packets to the victim wifi. Clone their access point and host an open wifi. Let ...
0
votes
2answers
120 views

unauthorized devices appear in windows 10 network drive SMB [closed]

Few days ago I was trying to access a shared folder via SMB on Windows File Explorer and noticed 3 strange mobile phone devices appear listed in the network drive. I never owned any of the mobile ...
1
vote
1answer
371 views

Capturing traffic on WiFi Network using Wireshark [duplicate]

Is it possible to capture, using Wireshark, regular data sent by another machine inside my Wireless LAN?
0
votes
1answer
1k views

Detect / Prove and Prevent Wifi Deauth attack

I'm suspecting that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi ...
1
vote
1answer
100 views

Is it possible to push a device from a private WiFi in order to decoy it to a public WiFi?

Regarding How to force clients to connect to WiFi automatically? and this situation: my neighbour is connected to his private Wi-Fi I have a Pineapple Nano broadcasting public SSID's (McDonald, ...
0
votes
1answer
236 views

Is it possible to make a spoofing attack in a access point with same SSID target network?

With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
-2
votes
2answers
385 views

How to get a thorough view of wireless router's logs?

I am trying to attack my wireless router using Kali Linux for learning purposes. When I check the wireless router's logs after a successful attack, it doesn't show me the logs related to attacks which ...
0
votes
1answer
108 views

How do Access Points manage attempted Passwords? [duplicate]

How do Access Points check whether the provided password (given by the device wishing to authenticate) is actually the correct password of the Access Point? If a user attempts to join a secured ...
2
votes
1answer
102 views

Is it possible to classify Wi-Fi Security Level without connect to Wi-Fi

Is it possible to classify Wi-Fi Security Level (such as Secure, Non-secure, etc.) without connect to Wi-Fi. I don't know is it possible, but if not, can we still classify Wi-Fi security level when ...
9
votes
2answers
1k views

WPA3 announced. Really needed?

It seems Wi-Fi Alliance announced WPA3 for the end of 2018. Anybody knows exactly what is new? features, security improvements, etc... Is it because of Krack attack? I thought patching WPA2 is enough....
2
votes
1answer
965 views

How UPnP is vulnerable if the attacker is not connected in the same network?

I read a lot about UPnP vulnerability and I understand it to some extent. What I don't understand is how attacker will attack if he is not connected to the same network. I read how attacker can do ...
0
votes
2answers
133 views

Is it impossible to know if the de-authentication packet has been sent to the victim using Wireshark and mdk3? [duplicate]

I want to know if the clients get disconnected or not without checking there devices while I am outside the network. Is it impossible with WireShark?
1
vote
3answers
653 views

Restrict mobile phones to specific Access Point (WIFI Router)

Is it possible to restrict the access of android phones, iphone, and MS phones and tablets to a specific AP? I want the corporate mobile device to only be able connect to one specific AP (the ...
4
votes
2answers
1k views

Difference between alfa card and my laptop network card?

I'm following a CEH formation in which we have to buy an alfa card. What's the difference between an alfa card and my laptop's network card? I thought it was that alfa card can be set in monitor mode ...
0
votes
1answer
261 views

Is TP-LINK TD-W8151N vulnerable to KRACK?

I have a TP-LINK TD-W8151N 150Mbps Wireless N ADSL2+ Modem Router. Is this model vulnerable to KRACK? It is not specified in the WPA2 Security (KRACKs) Vulnerability Statement. Will TP-Link publish ...
118
votes
3answers
18k views

Why wasn't the KRACK exploit discovered sooner? [closed]

From what I've read, the issue is as simple as performing step 3 of a 4-step handshake and the consequences of performing that step more than once. Considering the complexity of these kinds of ...
255
votes
5answers
29k views

Consequences of the WPA2 KRACK attack

Today new research was published on vulnerabilities in wireless network security called Krack. What are the real-world consequences of these attacks for users and owners of wireless networks, what ...
5
votes
2answers
1k views

Just how much of a risk am I putting on my network by allowing UPnP

I am facing a serious conundrum (to me at least). Whether or not to disable UPnP on my network. I understand the risk, an infected computer could punch a hole in my firewall, and more infections can ...
3
votes
2answers
314 views

Guest wireless network is directly connected to internal LAN. How bad is this?

At my work, there is a wireless network that is on the same subnet as the servers, printers and user machines. This wireless network allows users to have access to shared network drives as if the ...
5
votes
1answer
883 views

WPA2 and ChopChop attack

I know that WEP is vulnerable to the ChopChop attack. Could the ChopChop attack be carried against WPA2-PSK as well? Some Internet articles suggest this possibility, I want to be sure though.
0
votes
1answer
2k views

Can you use an android device as a wireless adapter for kali linux? [closed]

I am experimenting with Kali Linux. I set up Kali in Virtual Box on a mac. I realized that to do WPA/WPA2 cracking I would need a wireless adapter. Before running out to buy one I thought that I might ...
2
votes
1answer
182 views

Find rogue access point if area is saturated with networks

What do you do if you scan for rogue Access Points and find that the area is saturated by surrounding businesses with their own wifi? I recently scanned for wifi networks and found 60+ networks just ...
1
vote
1answer
138 views

Sharing wifi ,browsing

My neighbor gave me his WiFi password to use. He doesn't know much about computers, but he knows 'the basics'. Can he see in his browser history what sites I'm browsing, or my passwords?
6
votes
2answers
3k views

Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?

I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
1
vote
0answers
391 views

How can I capture a chronological record of the clients connected to a specific standalone AP?

I want to have a chronological/historical graph showing what times each client was connected to an AP using either airodump-ng with a simple script or some other free and open tool.
2
votes
1answer
866 views

Is a Captive Portal Wifi AP as insecure as an open unencrypted Wifi?

As far as I understand, the captive portal is implemented by some sort of iptable firewall rules. Since there is no handshake established during the initial association with the AP(As no passphrase is ...
1
vote
3answers
683 views

Handshake not recording

I am trying to crack wireless WEP password of my wireless AP. When I enable monitor mode and issue this command: root#airodump-ng -w TESTFILE1 -c 1 --bssid 68:72:51:58:A3:14 wlan0mon No handshake ...
0
votes
1answer
853 views

Fear of mac Spoofing. Two Mac addresses appearing on Router page with only 1 digit variation

I have tried looking into Info Sec's posts for a related issue but couldn't find a solution as my problem is a bit specific. I have been having connectivity issues, and as paranoid as I can get, i ...
3
votes
1answer
652 views

Why do public wifi networks often have a click screen to join? [closed]

At many if not most coffeeshops and other public Wi-Fi locations, even though Wi-Fi is free and not password protected, there are click screens with "join" buttons that need to be tapped to access the ...
1
vote
1answer
3k views

Security of Wi-Fi vs Bluetooth

I am preparing a project for a client. It is a wireless device to be used inside a factory so the workers can interact with the factory without having to go to a terminal. In order to connect the ...
2
votes
0answers
97 views

Getting the current time from wifi networks without connecting [closed]

In a microcontroller powered by a solar cell we need to have the current time. When the sun decrease the micro-controller switch off and all the volatile data vanish. When the sun increase the micro-...
1
vote
1answer
2k views

Are iPhones immune to deauth attacks?

I was today rumbling a bit with wireless security, and more specific in creating Fake Access-Points to make Wi-Fi users enter their password on a phishing-page (by using the Fluxion tool). One of the ...
0
votes
1answer
96 views

Wireless Access Point CONF? Edit [duplicate]

Is it possible that for instance I have one access point that it requires a password for authorization to access to modem and internet. I want to edit this step like a user when he/she click to the ...
3
votes
1answer
491 views

What information can WiFi devices leak without actually connecting?

Mr Paranoid walks from one secure location to another. Mid-journey, he panicks -- his wireless device (laptop, iPad, or other common consumer electronics) is turned on! If it sent any information to ...
1
vote
1answer
248 views

Prevention against De-Auth Attack for Handshake Capturing [duplicate]

As far as I know about De-authentication attack, the attacker sends de-auth packets to both router and the victim asking the victim to disconnect and reconnect. But I wonder what would happen if I ...
1
vote
0answers
44 views

What happens when an attacker sends fake nonce in TKIP handshake?

The TKIP handshake is halfway completed; the access point and station have exchanged the first two messages. Now, before the access point can send the third message to the station an attacker sends a ...
6
votes
4answers
904 views

Caught Deauth attempt on wireless network last night. Suggestions on what to do from this point?

Last night around 3-4 am I had noticed my network acting funky.. I flipped my wireless card into monitor mode and boom there was a rogue AP. I then acknowledged that I had seen them and mimic'd the ...
1
vote
0answers
99 views

mdk3 beacon pwning not detected by other devices

I'm new to wireless security. I'm trying to pwn beacon frames to announce a new access point using mdk3. However, when I run the command I get the following result where the MAC address is not ...
1
vote
1answer
486 views

What information does a wireless access point have about connected devices?

Which information about a connected device leaks to the access point it is connected to? What's the minimum amount of information that must be supplied to successfully connect, apart from the password?...
5
votes
1answer
694 views

How Hole 196 actually works ? What WPA parameters does it exploit?

While dealing with wireless set I came across the term Hole 196. Got to know that preventions too. But can it still bypass Client isolation and standard preventive approach if packets are crafted at ...
6
votes
2answers
749 views

What are weak IVs? Can we somehow stop or slow down WEP cracking by avoiding usage of them?

Most of us dealing with wireless security must have cracked a WEP key, and while doing that must have come across texts like this: weak IVs, reveal more information about the secret part of the WEP ...
1
vote
2answers
720 views

scans for WIFI access points

PCI DSS requirement 11.1: "Implement processes to test for the presence of wireless access points (802.11), and detect and identify all authorized and unauthorized wireless access points on a ...
2
votes
1answer
629 views

Is WPS still insecure if the router requires a client pin?

Recently purchased an Asus AC88U and I noticed that you can require a client pin for a WPS connection to successfully happen. It seems that this would be a pretty secure implementation of WPS. Are ...
4
votes
1answer
2k views

Can my college Wi-Fi admin obtain the serial number/IMEI of my device?

I am using my own device on my college's Wi-Fi. I've heard that many pieces of information about my device such as my OS version is sent through a browser such as Google Chrome. But how can he obtain ...
2
votes
2answers
151 views

Does any Wifi technology permit safe & secure sharing of an Internet connection?

I have an internet circuit that I would like to protect from untrusted peers. BUT I don't want the peers in the same broadcast domain to be able to affect other peers. (e.g. Wifi user 1 shouldn't be ...
0
votes
1answer
232 views

Using old router as wi-fi extender/extra security on shared network?

I just moved into a building with three apartments, all of which split an internet subscription. There is only one router, however, in one of the other apartments. For security/privacy purposes, I'd ...
0
votes
2answers
103 views

How secure is LAN wireless 802.11 if password is used with access point?

I've read a book on computer networks, and among other subjects the author touched WiFi security. It was said that WiFi has some serious security flaws and that there is even free publicly available ...