Questions tagged [wifi]
Security for 802.11 wireless networks.
124
questions with no upvoted or accepted answers
5
votes
0
answers
559
views
Do modern operating systems still send targeted or directed Wi-Fi probe requests that contain SSIDs?
Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to?
Such targeted or ...
- 199
5
votes
2
answers
2k
views
How is TSC (TKIP sequence counter) calculated, in WPA?
I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images:
...
- 191
4
votes
0
answers
243
views
Difference between OSEN and OWE for secure open Wi-Fi
I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
- 141
4
votes
1
answer
10k
views
PMKID found , but it should be WPA handshake
i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect
WPA handshake
in right top ...
- 41
4
votes
0
answers
178
views
Broadcasting 10k SSIDs
How hard would it be, and or is it possible, to configure a router or PC to broadcast ten thousand SSIDs. If it is possible what repercussions would it have? Would this be a form of DOSing or is there ...
- 458
4
votes
0
answers
139
views
WiFi Fingerprinting RFC2617 Linux Device Cannot Unauthenticate Unless AP Password Changes
There is a Cisco WiFi Access Point in the office that is intended for guests. It is an open network in that you can associate without providing a password with the SSID. It supports RFC2617 and so the ...
- 141
3
votes
1
answer
441
views
airgeddon returning the wrong key
I was testing how WPS works on my home router and tried to gain access with airgeddon.
Problem is the key that airgeddon returns is an 8-digit number, not my WPA2 password.
My output looks like this:
...
- 31
3
votes
0
answers
207
views
WPA2 MIC 128bits value VS HMAC SHA1 output 160bits
I understand that under WPA2, if the MIC value is equal to the HMAC SHA1 function, that means the password from dictionary attack works.
However, after deriving the MIC value from Wireshark, which is ...
- 31
3
votes
1
answer
139
views
Least riskiest option when it comes to reinstalling the OS
I understand security is a continuum rather than a binary, which is why I'm asking this question.
I need to reinstall the OS on my Macbook. However, after a security mishap, I’m far more alert about ...
- 531
2
votes
0
answers
69
views
Are phone calls via WiFi VOIP encrypted by A5/1, A5/2, and A5/3?
I have enabled a function in my mobile phone, that uses my home Wi-Fi network to make calls when the cellular signal does not exist. As far as I know, the cellphone provider charges me as though I ...
- 255
2
votes
0
answers
7k
views
How to send deauth packets on Windows (manually or with software)?
first of all I know how deauth packets work basically. But since my wifi adapter refuses to work on my virtual Kali, I want to use my host machine (Windows 10). So I have NPcap and Wireshark and I can ...
- 21
2
votes
0
answers
147
views
802.11s with SAE vs WPA-RSN (802.11i) on a MESH network
I'm investigating a protection options for a mesh network (p2p). The amount of nodes is constantly changing and possibly owned by different entities.
We are thinking between 802.11s with SAE (...
- 121
2
votes
0
answers
304
views
What should we do in practice to mitigate vulnerabilities in WPA3?
WPA3 for Wi-Fi systems is generally acknowledged to be more secure than WPA2. For example, it introduces SAE with the Dragonfly handshake, in an attempt to close the door on the kind of brute force ...
- 493
2
votes
0
answers
264
views
How does WIFI password verification work in a WiFi evil twin?
Problem Statment
I am trying to guard against the following scenario.
I have a laptop and it connects over wifi, at home as well as at workplace.
I am not familiar with the wifi protocol.
I ...
- 181
2
votes
0
answers
4k
views
Problem while using Reaver WPS
I was trying to crack my WiFi Router. I have two laptops an older one(Lenevo 3000 G430) and a newer one(HP Elitebook 840 G3) with their internal adapter. The old one has BCM4312 802.11b/g
chipset and ...
- 21
2
votes
1
answer
373
views
Monitoring nearby WiFi clients
I know that a WiFi adapter can scan for active BSSIDs, and that in monitor mode it can scan all unencrypted traffic.
What is the best way to list nearby WiFi clients from Python? I understand that ...
- 121
2
votes
0
answers
152
views
A very curious wifi problem
I was having some trouble with my wifi reception on the 2.4g band so I started up airodump to look for any offending signals. I found a strong hidden essid on the same channel I was on, so I logged on ...
2
votes
0
answers
501
views
For cloud-based password managers, is it safe to login using public WiFi?
For cloud-based password managers, is it safe to login when using public WiFi?
To help get good answers to this question, let's define 3 terms:
Cloud-based password managers = Password managers such ...
2
votes
1
answer
448
views
Network with one possible unsecure device and one home assistant device
Background:
I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I'm not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app ...
- 463
2
votes
0
answers
178
views
How can a 802.11 client verify the authenticity of an AP it is trying to connect to?
With the onset of hardware like the WiFi pineapple, it has become somewhat harder to protect the privacy of your WiFi network. WPA2 Enterprise with Radius authentication could come to rescue here, but ...
- 583
2
votes
2
answers
859
views
Wi-fi Certificate Permission and Access to phone/data
There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
- 121
2
votes
0
answers
330
views
Why WPA2 did not design a PTK based on asymmetric cryptography?
I was shocked to learn how the PTK is crafted from the PMK in WPA2 WiFi.
PMK is made with crypt_hash(SSID + PSK). OK, seems good.
Then, the client and the Access Point (AP) make the famous 4 way ...
- 1,348
2
votes
0
answers
461
views
Securing wifi hotspots across multiple devices with multiple users
I have a situation where multiple devices will be installed in public places and different maintenance engineers, from potentially different companies, will need to login via their wifi hotspot to set ...
- 21
2
votes
0
answers
2k
views
Can SSH tunneling over DNS tunnel work in China to use free WiFi at airport?
I have followed a tutorial here: http://ebnj.net/sshoverdns/
This tutorial tells us how to carry all internet traffic via DNS tunnel if your airport enables no-limit outgoing DNS.
This guides us to ...
- 387
2
votes
0
answers
1k
views
Does EAP-TLS provide a two-factor authentication?
I am currently setting up FreeRADIUS on my pfSense firewall to authenticate WLAN clients (mainly iOS) via EAP-TLS.
I have therefor created a user certificate and a user within the FreeRADIUS user ...
- 315
2
votes
0
answers
242
views
WPA2-Enterprise - unable to find a way around Lanner Electronics
I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
- 31
2
votes
1
answer
489
views
WPA PSK to WPA EAP PSK roaming
Would clients (iPhone, android, whatever) roam seamlessly from an AP using WPA-PSK to an AP using WPA-EAP-PSK (with PEAP passthrough setup) if the same PSK was used and valid on both APs (AP1 and AP2 ...
- 21
1
vote
2
answers
99
views
What is better for security when using virtualbox?
I have a virtual machine running on Virtualbox on my host OS.
I want to make sure that my host PC is as safe from outside threats as possible. When using an ISO live image as the virtual machine, ...
- 589
1
vote
1
answer
172
views
What is the most secure internet access option for Android phones?
My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have:
The phone ...
- 33
1
vote
2
answers
190
views
What are the risks of using an unpatched device connecting to the internet infrequently?
My grandfather is interested in buying a smart tablet. He never had any personal computer or any internet connection. He wants to use his tablet solely to read the newspaper, as they no longer deliver ...
- 11
1
vote
2
answers
188
views
Are there any further security considerations when joining a public wifi network other than firewall and anti-virus?
If I use my laptop on my company wifi network to use the internet, what access has the company to the laptop hard drive and information on it? The company wifi is there for customers and employees (...
- 11
1
vote
0
answers
114
views
How can someone using public wifi be deanonymized?
Say someone wants to send a document overseas while living in a hostile country. He uses tor over public wifi. What are some ways he can be tracked if he uses a burner laptop and public wifi? Few ways ...
1
vote
1
answer
211
views
How to handle a router from an apparently security-indifferent ISP with no possibility to switch?
My ISP's security strikes me as... somewhat alarming to my admittedly non-expert eyes. They store wifi passwords in plaintext on their website and allow changing it there - this is apparently meant to ...
- 225
1
vote
0
answers
197
views
WEP fake authentication purpose
I am studying WEP protocol and more specifically fake authentication attack. Man page says
This is only useful when you need an associated MAC address in various aireplay-ng
attacks and there is ...
- 193
1
vote
0
answers
189
views
What is Received Sequence Counter(RSC) in WPA authentication
In WPA 4-way handshake and in Message 3 (while GTK transfer), A RSC (Received sequence Number ) sent by the Authenticator (AP) to the supplicant.
The only information I found about RSC is that it's ...
- 11
1
vote
1
answer
162
views
How to prevent the device from connecting to the original AP?
I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one.
The aireplay is likes so:
...
- 11
1
vote
0
answers
198
views
Problems in stopping/restoring Aircrack session
I'm running aircrack-ng version 1.6 on Live Kali. I noticed that "recently" a -N option has been added for saving a session, which can be later resumed with the option -R.
However this seems ...
- 119
1
vote
0
answers
123
views
How to start Hotspot 2.0 registration and provision?
On many materials of Passpoint and Hotspot 2.0 there is Register and Provision steps.
For example https://youtu.be/p4gDW6SJ150?t=845
But I cant find RFC or technical materials how it must be ...
- 111
1
vote
1
answer
348
views
Airmon-ng/Airodump-ng - Low Beacon Count on certain networks
It's been a few years since I've played around with this so I'm not sure if times have changed.
When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
- 113
1
vote
0
answers
138
views
Why did I get incorrect wifi password pop up for unknown network on iPhone?
A few months ago my iPhone had a pop up saying 'incorrect wifi password' and telling me to enter the correct password, however it was for a network that I had never connected to or seen before. It ...
- 11
1
vote
1
answer
3k
views
Success rate of pixie dust attack
Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS-enabled ...
- 51
1
vote
0
answers
986
views
I'm not able to DeAuth a Client (Aireplay-ng)
I'm trying to perform a De-authentication attack on my own network and client. However, the client never disconnects and I cannot boot the client from the AP.
I'm running:
aireplay-ng -0 0 -a [BSSID]...
- 29
1
vote
0
answers
118
views
Preventing DoS and flooding attacks on wireless MANET network
How can I prevent DoS/flooding attacks on a wireless MANET network?
- 255
1
vote
0
answers
2k
views
Bully and reaver not finding anything in any network
I have been trying out reaver and bully on my network and friends network, multiple different routers, but none of them finds anything.
The command for reaver that I run is:
reaver -i wlan0mon -c ...
- 11
1
vote
0
answers
641
views
How to prevent a DHCP Starvation attack in a wireless network
Is there any way to prevent a DHCP Starvation attack when using a wireless network with anonymous users?
Port security cannot be used since maxing the number of clients that can connect on a port ...
- 19
1
vote
0
answers
132
views
What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?
When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
1
vote
0
answers
2k
views
How secure is my apartment's building wide wifi network using Spectrum Community Solutions?
Recently my apartment moved from having individual modems (with our own router/wifi network) to this Spectrum Community Solutions building wide network. Everyone can connect to the network anywhere, ...
- 11
1
vote
0
answers
213
views
WiFi Channel 6 unusable, but no other AP on Channel 6
There is a single MAC address broadcasting a vast amount of QoS packets on channels between 3 and 9. Is this a DoS attack?
The access point that MAC address is associated with says its on channel 1.
...
- 29
1
vote
0
answers
196
views
Are VLANs necessary to segment WiFi SSID to secure traffic?
WiFi routers offer the ability to configure multiple SSIDs. Equally some routers also enable the option to configure virtual networks (VLANs).
If the requirement is to secure WiFi traffic such that ...
- 1,513
1
vote
0
answers
329
views
How to secure Wifi Direct p2p connection between android devices?
I found this answer. However, I want to know how to use WPA2 and ssl to secure wifi - direct connection.
Also is there a way to make wifiDevice visible only in the app that I want and not in other ...
