Skip to main content

Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
7 votes
1 answer
3k views

Evil twin access point with WPA/WPA2 [duplicate]

When I created an evil twin AP with an SSID of someone else's Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with ...
0 votes
1 answer
405 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
2 votes
3 answers
213 views

Why does having default router credentials pose a risk? [duplicate]

When I got to 192.168.0.1/login I am greeted with my router login page and can go change some settings. Now let's say I still have the factory default login something like "admin", "...
0 votes
1 answer
2k views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
2 votes
1 answer
508 views

Monitoring nearby WiFi clients

I know that a WiFi adapter can scan for active BSSIDs, and that in monitor mode it can scan all unencrypted traffic. What is the best way to list nearby WiFi clients from Python? I understand that ...
3 votes
1 answer
7k views

Dumpper and Jumpstart for hacking WPS

As asked in this question, there is a program called Dumpper. it can find PIN of AP without brute forcing them. But with another tool called Jumpstart, together they can crack any AP that is running ...
0 votes
1 answer
349 views

How are keys negotiated in wpa-eap?

Question about PEAP-MSCHAPV2 on RADIUS. After MSCHAPV2 success keys are extracted from TLS context. Then it sent to AP. Client failed to connect WiFi (or eapol, etc) with my handmade RADIUS Access-...
3 votes
1 answer
538 views

airgeddon returning the wrong key

I was testing how WPS works on my home router and tried to gain access with airgeddon. Problem is the key that airgeddon returns is an 8-digit number, not my WPA2 password. My output looks like this: ...
4 votes
1 answer
1k views

How dangerous is sharing a WiFi network with neighbors?

Context. I am moving in to a building where neighbors share WiFi. There are several routers connected with each other, and residents connect to one of the WiFi networks. I was told it's cheaper that ...
25 votes
8 answers
48k views

Tracking down a rogue access point

Over the course of about a month we have received multiple reports of a rogue access point attempting to intercept traffic. I suspect an attacker is using a wifi pineapple or similar hardware device. ...
13 votes
3 answers
25k views

Whats the difference between an evil twin and a rogue access point?

I'm having a hard time understanding the difference between a rogue AP and an evil twin. I've spent some time searching for it, but I don't think I understand it fully. Is the AP a device that needs ...
1 vote
1 answer
498 views

Airmon-ng/Airodump-ng - Low Beacon Count on certain networks

It's been a few years since I've played around with this so I'm not sure if times have changed. When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
0 votes
0 answers
20 views

What a Rogue AP can do? Can it intercept traffic? [duplicate]

Why a Rogue Access Point can "intercept" all traffic? Rogue AP doesn't know the shared key, so can't decrypt the traffic... So what are the dangers? What harm can a Rogue Access Point do?
1 vote
1 answer
101 views

In WPA handshake brute force attack, how can attacker find PMK if MIC is performed using only HALF of PTK?

Brute force attack against WPA is the most common attack against WPA/WPA2 networks. Attacker captures the 4-way handshake that allows the authentication key to be cracked offline. During the 4-way ...
2 votes
1 answer
3k views

Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode

I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
1 vote
3 answers
391 views

Can employer view images in email on personal device in personal email account over wifi?

Accidentally opened my personal email on company wifi. Had received a message with a suggestive but not graphic image in it, but still what I'd consider inappropriate use of wifi. It was mail from a ...
0 votes
1 answer
112 views

Can I make a WEP wifi and crack it using two virtual machines?

I am using VirtualBox, Kali linux as the attacker vm and xubuntu as the supposed AP. However, I only have my wireless pcie card on my actual pc and it seems that making a virtual interface card doesn'...
69 votes
9 answers
31k views

Why isn't open WiFi encrypted?

As far as I understand, WiFi networks that require no password send traffic through the air unencrypted. Those that require a password encrypt each connection uniquely, even if they're all using the ...
1 vote
0 answers
102 views

Is it safe to use a laptop on a public WiFi with VPN? [duplicate]

Im in a situation where Im moving between apartments and need to live at an extended stay hotel for a week or two. The hotel does have free WiFi but it is public. If I use my company’s VPN and visit ...
3 votes
1 answer
518 views

What should we do in practice to mitigate vulnerabilities in WPA3?

WPA3 for Wi-Fi systems is generally acknowledged to be more secure than WPA2. For example, it introduces SAE with the Dragonfly handshake, in an attempt to close the door on the kind of brute force ...
1 vote
1 answer
5k views

Success rate of pixie dust attack

Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS-enabled ...
1 vote
0 answers
41 views

Unable to capture authentication frames in monitor mode in linux

Unable to capture authentication frames in monitor mode in linux using Wireshark. I am able to see probe request & response, Acknowledgement, Beacon, cts, rts frames. Followed below steps and also ...
0 votes
2 answers
506 views

What is the difference between a VPN and a Tor Socks proxy on public wifi?

I seek protection against MITM & snooping of VPN or Tor proxy traffic on public WiFi. So, what are the different security impacts of each of these 2 solutions: Using a VPN (like Proton VPN) to ...
5 votes
2 answers
2k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
0 votes
2 answers
356 views

Does a secured guest network on my router create significant vulnerability?

Guests need to use Wi-Fi when they come by, so to minimize risk, I've simply kept a secondary secured router running for guests since it's not possible to understand anybody's computer & security ...
3 votes
3 answers
2k views

Is HTTPS over wifi still safe if a hacker can set up a rogue DHCP server?

I always heard that entering passwords or any sensitive information while using a public wifi spot is safe only when visiting an HTTPS website, ensuring that the URI and certificate are valid. Many ...
6 votes
4 answers
5k views

Will installing a kernel mode driver onto a PC compromise the entire network it's connected to?

At home, my personal PC and work computers all connect to the same network, via ethernet and WiFi. A video game on my personal PC is requiring an install of a "kernel mode driver." At the ...
0 votes
1 answer
94 views

Corporate WiFi with PreShared key - an issue? [closed]

The company I work for has a WiFi that employees use a single preshared key to connect to it. This is a WiFi that directly connects to our internal network. It's not the guest network. And the ...
4 votes
2 answers
1k views

How does a password prevent an evil twin if the password is publicly known?

This discussion of WPA3 OWE seems to imply that WiFi at Starbucks/the airport/whatever can be secured against an evil twin attack if they use WPA3-Personal instead of OWE. But it seems like that ...
0 votes
0 answers
36 views

Why am I having trouble capturing and transmitting ARP packets to increase data in a WPA2 network injection attack?

I'm trying to inject packets into my own WPA2 network and rapidly increase the data packets. I've followed these steps: Connected my wireless adapter to my Kali Linux machine. Put my wireless adapter ...
1 vote
2 answers
307 views

Are there any further security considerations when joining a public wifi network other than firewall and anti-virus?

If I use my laptop on my company wifi network to use the internet, what access has the company to the laptop hard drive and information on it? The company wifi is there for customers and employees (...
0 votes
0 answers
53 views

What kinds of attacks are eliminated in WPA2-PSK if for each device there's a different (secret) PSK?

With regular WPA2-PSK there's the fact that every device shares the same PSK, hence it's possible to impersonate the AP by setting up an Evil Twin and watching the traffic. This isn't possible without ...
1 vote
1 answer
287 views

How to prevent the device from connecting to the original AP?

I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one. The aireplay is likes so: ...
2 votes
1 answer
517 views

Network with one possible unsecure device and one home assistant device

Background: I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I'm not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app ...
1 vote
1 answer
361 views

What is the most secure internet access option for Android phones?

My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have: The phone ...
1 vote
1 answer
10k views

WPA cracking with Crunch, JTR & Aircrack

Now I assume that everyone knows of aircrack-ng and John The Ripper with it's fantastic ability to pause and resume cracking. With that aside, I want to add Crunch into the mix, however I can't seem ...
7 votes
0 answers
704 views

Do modern operating systems still send targeted or directed Wi-Fi probe requests that contain SSIDs? [closed]

Do modern (versions of) operating systems, primarily Android and iOS on mobile, still send targeted or directed probe requests when searching for Wi-Fi networks to connect to? Such targeted or ...
1 vote
0 answers
46 views

Why isn't airolib-ng generating PMKs from the database after importing a password list and ESSID?

I have been trying to create PMKs using airolib-ng with a password list generated by crunch and an ESSID text file. Here's the process I followed: Created a password list file using crunch and saved ...
2 votes
2 answers
2k views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
4 votes
1 answer
15k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect WPA handshake in right top ...
1 vote
1 answer
1k views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
2 votes
1 answer
744 views

How to implement Wi-Fi deauthentication attack on mac

I am trying to send "de-authentication requests" with Mac but all the previously used tools don't work I was using bettercap before, now it says that deauth packet was sent but nothing is ...
14 votes
4 answers
1k views

Wireless Activity Monitoring for PCI DSS Compliance

In an effort to be PCI DSS compliant, I took a trustkeeper.net questionnaire. I failed the question that asks: Is the presence of wireless access points tested for by using a wireless analyzer at ...
0 votes
0 answers
220 views

Opening a mobile banking app in an unknown Wifi [duplicate]

At Travel.SE, we have an HNQ: How to make my credit card "less" secure for travel? about how to reduce the number of false credit card declines when traveling abroad. The current top answer ...
12 votes
3 answers
25k views

Is it safe to log into my bank website over a public wifi?

Is it safe to log into my bank website over a public wifi (like a coffee shop)? I realize that the connection between the browser and bank servers should be encrypted, however I'm wondering if there ...
1 vote
2 answers
161 views

If I did MAC filtering whitelist, what will happen with devices that weren’t add to list?

In my home WIFI router, I set MAC filtering for me and my family’s devices (about 6 devices). If some devices that weren’t in my MAC filtering whitelist, and they know my WIFI password and try to ...
4 votes
1 answer
960 views

Difference between OSEN and OWE for secure open Wi-Fi

I would like to better understand the difference and trade-offs between WiFi's OSEN and OWE authentication modes. My understanding is that these have broadly similar goals, namely preventing traffic ...
1 vote
0 answers
178 views

aireplay-ng --deauth never finds BSSID available

I've been trying to crack wifi wpa2 handshake using airodump-ng and aireplay-ng. I'm using alfa awus-036acs adapter. sudo airodump-ng wlan0 sudo airodump-ng --bssid MAC ADDR of AP --channel 1 -w ...
4 votes
2 answers
4k views

Unknown Wi-Fi SSID detected - is it a danger?

I see an available connection "Eliza" in my area. How can I check if this is a danger to me?
5 votes
3 answers
7k views

How can I check wifi activity?

I have a LAN network with three computers connecting to the Internet both through wired and encrypted wifi connections. Is there a way I can check who is connecting to the Internet via the wifi ...

1
2 3 4 5
30