Questions tagged [wifi]
Security for 802.11 wireless networks.
1,458
questions
5
votes
2
answers
2k
views
How is TSC (TKIP sequence counter) calculated, in WPA?
I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images:
...
CommunityBot
- 1
1
vote
0
answers
36
views
Is it possible to see someone using vpn who is connected to my AP and turned on hotspot for his mobile in which he uses vpn
I want to monitor traffic in my Access point of the users who turned on hotspots in their PC after connecting to the wi-fi.
I want to monitor users who use vpn to access blocked sites in my ...
0
votes
2
answers
211
views
Does a secured guest network on my router create significant vulnerability?
Guests need to use Wi-Fi when they come by, so to minimize risk, I've simply kept a secondary secured router running for guests since it's not possible to understand anybody's computer & security ...
CommunityBot
- 1
0
votes
0
answers
25
views
Is there any security threat with open WiFi connection in 2023 for online banking? [duplicate]
According to its website, my bank does not recommend to use open wifi networks for online banking without VPN.
Why is that?
I understand, that 10-20 years ago many site and application sent the data ...
- 126k
2
votes
2
answers
4k
views
How to find the IP address of a wifi router while I have it's MAC address?
I have a wifi scanner which shows me the MAC addresses of the wifi routers nearby.
It displays SSIDs in one column and MAC addresses in another column.
I want to know the IP address of the router. ...
- 126k
0
votes
3
answers
120
views
How can I be sure that my internet service provider is safe?
There is a new internet service provider in town that provides fiber internet--their internet is fast and it's proven. Almost everyone in our town switched to their internet. However, I am kind of ...
- 65.8k
1
vote
2
answers
189
views
What are the risks of using an unpatched device connecting to the internet infrequently?
My grandfather is interested in buying a smart tablet. He never had any personal computer or any internet connection. He wants to use his tablet solely to read the newspaper, as they no longer deliver ...
CommunityBot
- 1
0
votes
0
answers
46
views
How to secure old routers with WPA2 and with old firmware?
There are many old routers that support WPA2 that hadn't had a firmware update released since around 2010. Is it possible to secure their WPA2 implementation considering the more recent ...
- 126k
6
votes
3
answers
5k
views
Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?
I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
- 126k
7
votes
2
answers
788
views
How to send Wi-Fi management frames from macOS?
I realise that this question has been touched on before here. However, none of the solutions suggested solved my question and they all fail to answer the overarching question of how to send all types ...
- 31
1
vote
1
answer
91
views
Cracking WiFi credentials without handshake or PKMS
How can I crack WiFi credentials WITHOUT using the traditional method of capturing a PKMS or Handshake?
When I connect to a WiFi network, I simply enter a password into a text box just like any other ...
- 2,265
1
vote
2
answers
188
views
Are there any further security considerations when joining a public wifi network other than firewall and anti-virus?
If I use my laptop on my company wifi network to use the internet, what access has the company to the laptop hard drive and information on it? The company wifi is there for customers and employees (...
CommunityBot
- 1
5
votes
1
answer
598
views
Is WPA3 mixed mode less secure than pure WPA3?
I want to use WPA3 alone, but it seems that a lot of devices I have only support WPA2, so I have to enable WPA2 in one way or another. Currently, I have created two Wi-Fi networks on the same router: ...
- 776
1
vote
1
answer
157
views
How to prevent the device from connecting to the original AP?
I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one.
The aireplay is likes so:
...
CommunityBot
- 1
2
votes
1
answer
448
views
Network with one possible unsecure device and one home assistant device
Background:
I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I'm not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app ...
CommunityBot
- 1
1
vote
2
answers
99
views
What is better for security when using virtualbox?
I have a virtual machine running on Virtualbox on my host OS.
I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
CommunityBot
- 1
0
votes
1
answer
99
views
Does WPA/WPA2 mixed mode have weak security even if I always connect using WPA2-AES?
My Wi-Fi access point is in "WPA/WPA2 mixed mode", which allows devices to connect to it using either WPA, WPA2-TKIP, or WPA2-AES. My Apple® smartphones and tablet computers are warning that ...
- 126k
2
votes
2
answers
848
views
Wi-fi Certificate Permission and Access to phone/data
There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
CommunityBot
- 1
4
votes
1
answer
9k
views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect
WPA handshake
in right top ...
CommunityBot
- 1
1
vote
1
answer
892
views
Passive WiFi sniffing without associating to the AP
Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
CommunityBot
- 1
0
votes
1
answer
267
views
Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?
I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
CommunityBot
- 1
1
vote
1
answer
210
views
How to handle a router from an apparently security-indifferent ISP with no possibility to switch?
My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
CommunityBot
- 1
1
vote
2
answers
183
views
Can any program discover my precise geolocation?
While browsing the internet on my laptop, I've allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked ...
0
votes
0
answers
44
views
Tracking location of a SIM card using only mobile data?
SIM card supporting mobile data (5G) is inserted into a WiFi router (without GPS supported) - how accurate can be tracked by the mobile operator if the government has a warrant? Is the cell tower ...
1
vote
1
answer
171
views
What is the most secure internet access option for Android phones?
My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have:
The phone ...
CommunityBot
- 1
0
votes
0
answers
110
views
Cannot aireplay-ng deauth attack Android 11
I was trying to do a deauth attack on Android 11 phone but it didn't work. I am using
sudo aireplay-ng --deauth 100000 -a [AP mac_addr] -c [my mac_addr] wlan0
The access point uses wpa2 encryption, ...
- 126k
0
votes
1
answer
2k
views
Aireplay-ng deauth has no effect
I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop.
The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
CommunityBot
- 1
-1
votes
2
answers
160
views
Can a device that connected to malicious network once be compromised even after disconnection from malicious WiFi?
I need to take my personal laptop to the workplace so I will be using their internet that only employees usually use. However, if the network I connected to was malicious, is my data only compromised ...
CommunityBot
- 1
8
votes
1
answer
2k
views
Does the attacker need to be on the same network to carry out a deauthentication attack?
I'm sort of confused due to contradicting information about it but I just want to know if it's important for an attacker to be on the same Wifi network if he wants to deauthenticate another user?
2
votes
1
answer
372
views
Monitoring nearby WiFi clients
I know that a WiFi adapter can scan for active BSSIDs, and that in monitor mode it can scan all unencrypted traffic.
What is the best way to list nearby WiFi clients from Python? I understand that ...
CommunityBot
- 1
0
votes
1
answer
272
views
How are keys negotiated in wpa-eap?
Question about PEAP-MSCHAPV2 on RADIUS.
After MSCHAPV2 success keys are extracted from TLS context. Then it sent to AP.
Client failed to connect WiFi (or eapol, etc) with my handmade RADIUS Access-...
CommunityBot
- 1
3
votes
1
answer
435
views
airgeddon returning the wrong key
I was testing how WPS works on my home router and tried to gain access with airgeddon.
Problem is the key that airgeddon returns is an 8-digit number, not my WPA2 password.
My output looks like this:
...
CommunityBot
- 1
1
vote
1
answer
347
views
Airmon-ng/Airodump-ng - Low Beacon Count on certain networks
It's been a few years since I've played around with this so I'm not sure if times have changed.
When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
CommunityBot
- 1
1
vote
1
answer
2k
views
Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode
I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
CommunityBot
- 1
0
votes
3
answers
300
views
Security impacts of using public wifi
I generally use a free college wifi and sometimes chats on telegram and also send pics can hackers access those pics and chats and can he access my gallery and see pics?
And if he hacks and install ...
CommunityBot
- 1
0
votes
2
answers
78
views
Can employer view images in email on personal device in personal email account over wifi?
Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi.
It was mail from a ...
CommunityBot
- 1
0
votes
4
answers
332
views
Is Wifi Penetration Testing Dead?
"I hack your Wifi in 5 Minutes" still seems to be a hot topic on youtube in 2023, atleast on beginner channels like David Bombal. However, is there still any real world application? Even ...
- 100
1
vote
2
answers
98
views
Prevent device from seeing WiFi networks for geolocation
This is something I was wondering while trying to improve my privacy.
Mobile devices tend to use geolocation based on WiFi networks they find available (thanks to evil Google...).
One could use ...
- 126k
0
votes
0
answers
48
views
Technical details behind how a malware-infected device infects other devices on the same network?
I'm a security student and for one of my projects, I'm trying to learn the technical details behind a malware-infected device infecting other devices on the same network. I can see so much content ...
- 23
1
vote
1
answer
3k
views
Success rate of pixie dust attack
Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS-enabled ...
CommunityBot
- 1
2
votes
2
answers
3k
views
aircrack-ng issue: No mon0 when run "airmon-ng start wlan0" and "No such BSSID available"
I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
CommunityBot
- 1
2
votes
3
answers
3k
views
What prevents a coder from brute forcing a wifi?
I know that a coder is able to connect to a wifi through code so my question is: Is there anything that will make it difficult to brute force a wifi password?
CommunityBot
- 1
0
votes
0
answers
15
views
Does the client know about the salt used for checking his password on a WPA2 wifi network? [duplicate]
I don't understand how the client is able to send his password secretly without knowing the salt.
- 101
2
votes
2
answers
157
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 51
11
votes
9
answers
90k
views
Wifi penetration testing: Why aireplay-ng de-authentication does not work?
I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine.
...
- 137
2
votes
0
answers
69
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 126k
0
votes
2
answers
180
views
Possibility of getting "hacked" on public Wi-Fi without transmitting sensitive data
Scenario: I'm currently at a hotel and want to connect my Chromecast to the hotel's public Wi-Fi; however, it cannot automatically connect to it because it requires pressing an "Accept" ...
- 109
142
votes
12
answers
34k
views
Is public Wi-Fi a threat nowadays?
In my opinion, arguments we have been using for years to say that public Wi-Fi access points are insecure are no longer valid, and so are the recommended remedies (e.g. use VPN).
Nowadays, most sites ...
- 15.2k
5
votes
0
answers
555
views
Do modern operating systems still send targeted or directed Wi-Fi probe requests that contain SSIDs?
Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to?
Such targeted or ...
10
votes
5
answers
1k
views
My ISP shows my WiFi password on their public site in plain text. Should I be worried?
I recently noticed that when logged into my ISPs (Spectrum) public, external site that can be accessed outside my network, I can see my home network's WPA2 password in plain text.
This clearly means ...
- 1,008