Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
0
votes
1answer
38 views

Can the ISP know which SSID I am logged in through?

If, for example, I am in a building containing 150 offices. They are all serviced by the same ISP. Each floor has a router servicing 30 offices each. I log on through Thompson Construction wifi ...
4
votes
2answers
163 views

Fake AP for Staff Security Awareness

We are working on an activity to train staff about security. Is there any way to spoof the company's guest router and ask staff to provide login credentials (as public wifi does) and when they do that,...
2
votes
1answer
201 views

Monitoring nearby WiFi clients

I know that a WiFi adapter can scan for active BSSIDs, and that in monitor mode it can scan all unencrypted traffic. What is the best way to list nearby WiFi clients from Python? I understand that ...
0
votes
1answer
82 views

If my home router password was reset, is that a sign of a security breach?

Recently I started having issues with my home Wi-fi connection. My devices showed as connected to the router, but no Internet was coming through. While trying to log into the router through my browser ...
26
votes
1answer
7k views

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks? WPA/WPA2 Enterprise using 2048-bit RSA public-key WPA/WPA2 Personal using 63-character ...
0
votes
1answer
113 views

How are keys negotiated in wpa-eap?

Question about PEAP-MSCHAPV2 on RADIUS. After MSCHAPV2 success keys are extracted from TLS context. Then it sent to AP. Client failed to connect WiFi (or eapol, etc) with my handmade RADIUS Access-...
0
votes
0answers
109 views

Someone connected to my hotspot. Are my phone and laptop now compromised?

I have been using my android phone as a wifi hot spot for my laptop over the last few days so I can access the internet. I've been in a new location with no other personal devices nearby, and the hot ...
0
votes
1answer
125 views

Airmon-ng/Airodump-ng - Low Beacon Count on certain networks

It's been a few years since I've played around with this so I'm not sure if times have changed. When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
0
votes
1answer
2k views

Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode

I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
2
votes
1answer
261 views

Why does WiFi deauthentication need multiple packets to work?

I am trying to understand a common "problem" when injection deauthentication frames in 802.11 networks. My goal is to cause a client to re-authenticate (like one would do, to capture a 4-way-...
0
votes
1answer
578 views

Can't see data packets when capturing in monitor mode

On Kali Linux, I have an Atheros wireless adapater. I'm trying to capture data packets off the air and decrypt them as an exercise. The problem is that when I turn on the wifi monitor mode and choose ...
4
votes
1answer
114 views

Does creating an Evil Twin require the network password in order to work?

I am currently trying to better understand this attack. If the network is open ie, not password, I would assume that it would be super easy for the evil twin to work. If I understand correctly, ...
0
votes
1answer
72 views

Catch enough IV to be in the FMS attack

I am doing WEP attack test using FMS method (Fluhrer, Mantin and Shamir), but not capturing enough 4,000,000 to 6,000,000 IV. Please show me how to catch enough IV.
-2
votes
1answer
72 views

How to Prevent a Hacker From Causing Damage if Connected to the Same Router

While using a router that I do not own, and suspect high odds of malicious users' concurrently connecting to it, how can I prevent them from causing any damage to me (injecting malware, stealing ...
2
votes
3answers
2k views

How to investigate my wifi router for devices which are disconnected earlier

I have a D-link 600M router with a simple WPA2 password that got cracked. 60 Gb of data was downloaded (I think they downloaded torrent movies), which resulted in the renewal of my data plan. I ...
1
vote
2answers
1k views

aircrack-ng issue: No mon0 when run “airmon-ng start wlan0” and “No such BSSID available”

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
2answers
187 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
1answer
628 views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
1
vote
1answer
268 views

Can my online activity be detected with this set up?

Here's my situation. In the past several months, I've had my credit card information stolen twice and Instagram account hacked into. I'm hoping this is just bad luck, but I'm a little paranoid now ...
1
vote
1answer
128 views

WPS PIN and key

I was testing how WPS works on my home router and tried to gain access with a tool I found on github called airgeddon. Problem is, I got the PIN down (the PIN I wrote down below is made up, it's ...
0
votes
0answers
22 views

Fixed Channel : -1 ( in Scanning and deauth)

I was using Alfa awus1900 (Realtek 8814u) wifi adapter to test my wifi but from this point, it always shows fixed channel -1 while scanning a particular bssid and on deuath also and after using --ig ...
7
votes
1answer
44k views

What are WiFi certificates used for? What are they?

Recently my university updated the certificates for authenticating on their WiFi network. I was hesitant to accept it because I wasn't sure what accepting it entailed or even what it was and what it'...
4
votes
2answers
1k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
0
votes
0answers
886 views

besside-ng “bad beacon” error when attempting to deauth (aircrack-ng)

Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200 Fresh Install of Kali Linux, fully updated (not on a VM) I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
8
votes
2answers
6k views

Why does a deauth attack work on WPA2 despite encryption?

Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn't the machine know that the message is illegitimate due to the fact that it would ...
0
votes
0answers
54 views

Hibernating printer to minimize attacks via Wi-Fi Direct

I upgraded a dinosaur multi-function printer (MFP) to a less prehistoric model [1]. "How convenient!" I thought of the Wi-Fi Direct, considering that I'm (lucky enough to be) working from ...
66
votes
3answers
15k views

Why does Windows store Wi-Fi passwords in a reversible format?

Running netsh wlan export profile key=clear in PowerShell will dump your current stored Wi-Fi settings, including the password, into xml files inside of whatever directory you are currently in. Why ...
18
votes
4answers
205k views

Can my family see what sites I visit while I am on their wifi?

I will be going on vacation for a few weeks to my family home and will be using their wifi for work. The problem is, I am a cam model, and do NOT want them to know that I am visiting the sites let ...
0
votes
2answers
179 views

How Wifi prevent hacking in the same network?

We all know that the client device and WiFi AP will perform the 4 way handshake to generate the session key (PTK). Here is the recap of the 4 way handshake. 1.Client device<-----ANonce-----WiFi AP ...
0
votes
1answer
9k views

Detect / Prove and Prevent Wifi Deauth attack

I suspect that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi connection ...
2
votes
1answer
2k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect WPA handshake in right top ...
1
vote
1answer
1k views

Success rate of pixie dust attack

Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS enabled ...
15
votes
3answers
24k views

What is the need and purpose of packet injection within WiFi attacks

According to my research, the most common WPA/WPA2 WiFi attack requires a chipset capable of packet injection. However I am not sure what this is, and what purpose it serves once you have the ...
1
vote
1answer
45 views

How to prevent the device from connecting to the original AP?

I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one. The aireplay is likes so: ...
2
votes
1answer
124 views

Network with one possible unsecure device and one home assistant device

Background: I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I'm not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app ...
0
votes
0answers
35 views

Using Open WIFi Newtorks With No Password [duplicate]

Please forgive my ignorance, but are there any security issues with connecting to a known (safe) WiFi network with that requires no password? Am I right in thinking that any other network that uses ...
3
votes
2answers
6k views

Security of bluetooth tethering vs. wifi hotspot

I'm using my cellphone to connect my laptop to the web. I think connecting my cellphone to my laptop with a USB cable would be the safest connection but if I go wireless, is it safer to connect to my ...
15
votes
3answers
16k views

My school wifi asks to 'trust' a certificate on iPhones. Does this allow them to view SSL traffic?

There is a lot of confusion around this on here, so I am making this post to be sure to understand it correctly. My school uses Aruba networks wifi, and after I type my Active Directory username and ...
0
votes
0answers
74 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
0
votes
1answer
403 views

How does the EAP-TLS handshake work, exactly?

I'm trying to understand EAP-TLS authentication, but I'm struggling to understand a few bits: Before the supplicant sends any certificates to the server, it usually verifies the server's identity. ...
0
votes
0answers
105 views

ESP32: Secure WiFi credentials via WebCrypto?

Background information: I am not a computer scientist. However, in a research project I am currently building a ESP32-based sensor. Multiple sensors of this type are going to be used by multiple users....
2
votes
2answers
330 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
25
votes
2answers
4k views

Why can't we perform a replay attack on wifi networks?

I was wondering that, when a hacker is trying to hack a Wi-Fi network, he/she would try to capture a handshake and then try to decrypt it, whereas when you want to log in to your Wi-Fi access point, ...
1
vote
1answer
712 views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
1
vote
1answer
86 views

Can wifi network administrators see if you are using a proxy?

A friend of mine wants to use a Proxy on his home computer because his parents have blocked many games and social media services. My question is, if he is using a Proxy, will his parents be able to ...
4
votes
1answer
4k views

WiFi Direct/WPS key question

So far, I haven't seen any PoC or real-world attacks against WiFi Direct, but I see the potential because it relies on WiFi Protected Setup (WPS) for establishing the connection. Tools like Reaver ...
0
votes
2answers
100 views

Is every packet in a home Wi-Fi which has say, AES password for connection, encrypted using the same password?

If there is an intruder in a LAN who knows the encryption type and password, will he be able to monitor all the packets which are in the LAN? Suppose someone on the LAN is visiting HTTP sites, which ...
0
votes
1answer
123 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
1
vote
3answers
15k views

Can a school wifi track your wifi after you disconnect?

So I logged into my school wifi on my laptop, and I was just wondering: Can they still track what I do even after I disconnect? I am using my own computer (not the school's,) but is it possible that ...
4
votes
3answers
488 views

How can I prevent abuse of our public WiFi network?

One of our customers runs a holiday park with <100 users on it. We currently have a mikrotik in place that prevents torrenting etc, however their line has been cut off as someone there has been ...

1
2 3 4 5
28