Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
3
votes
2answers
416 views

Possible Phishing Attempt?

I use an iPhone. Today I got a text from an unknown number starting from +65. The message was "your one-time Wifi password is xxxx and it’s valid for only 10 minutes". Thought it was a scam and ...
1
vote
1answer
41 views

Wifi: Added Security Certificate After the Fact?

I'm a freshman in university, and I recently moved into residence. Pretty quickly, I logged into campus wifi so I can actually do classes and things. My laptop and primary phone logged in with minimal ...
-1
votes
2answers
789 views

Can an infected device within the LAN still be a threat if turned off?

Scenario An attacker successfully infiltrates the LAN and infects a device that acts as a future bridge. Once inside, the infected device can communicate with a malicious source outside of the local ...
2
votes
1answer
2k views

PMKID found , but it should be WPA handshake

i was trying to get access in wifi network but i came to something that i need to ask afteraireplay-ng –0 20 –a [router bssid] –c [client bssid] wlan0mon i expect WPA handshake in right top ...
1
vote
1answer
1k views

Success rate of pixie dust attack

Recently I read about the pixie dust attack in which a WPS PIN is decoded with time stamp and other resources within a fraction of a second. The only drawback is that it only works on WPS enabled ...
1
vote
1answer
52 views

How to prevent the device from connecting to the original AP?

I'm running an Evil Twin attack with airgeddon. Point is that after deauth the account is going, automatically, to get reconnected to the orginal AP and not the fake one. The aireplay is likes so: ...
0
votes
2answers
9k views

Detect / Prove and Prevent Wifi Deauth attack

I suspect that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi connection ...
2
votes
1answer
136 views

Network with one possible unsecure device and one home assistant device

Background: I have a google home and I plan to buy 1 or 2 cheap cameras to monitor my home when I'm not in it. I plan to have the camera connected to a wifi plug, so I can switch it off via the app ...
0
votes
1answer
89 views

I installed internet certificates on my android to connect to uni wifi, can they see what I'm doing at home?

I wouldn't have thought that certificates could be used to track my history, I thought they were essentially login credentials, but I installed some to use my Uni wifi and now my google pixel 3 has a ...
3
votes
2answers
6k views

Security of bluetooth tethering vs. wifi hotspot

I'm using my cellphone to connect my laptop to the web. I think connecting my cellphone to my laptop with a USB cable would be the safest connection but if I go wireless, is it safer to connect to my ...
0
votes
2answers
50 views

What type of attack does WPS prevent?

There are many talks about why someone should not use WPS because of the attacks it allows. But does it also prevent attacks? For example, if guests want to join my network instead of giving these ...
0
votes
1answer
1k views

Can brute force or dictionary attacks be detected when using the WiFi protocol?

Can the WiFi protocol recognize when a brute force or dictionary attack on it is occurring? WiFi gives the user an authentication failed message after entering an incorrect WiFi password several times....
2
votes
2answers
359 views

Wi-fi Certificate Permission and Access to phone/data

There are several questions addressing similar questions, but not quite the same (others ask about MITM Attacks). They also state conflicting and opposing answers/responses, so I ask here 3 specific ...
26
votes
2answers
4k views

Why can't we perform a replay attack on wifi networks?

I was wondering that, when a hacker is trying to hack a Wi-Fi network, they would try to capture a handshake and then try to decrypt it, whereas when you want to log in to your Wi-Fi access point, you ...
1
vote
1answer
736 views

Passive WiFi sniffing without associating to the AP

Suppose that I have a WiFi adapter that is in range of several APs and clients, all sharing the same channel and all using WPA2 encryption. I know all their passwords. I'd like to sniff on all of them ...
0
votes
0answers
9 views

Collect Passive Information on Already Connected Wifi Routers [duplicate]

Since the mobile devices that we use automatically connect to the WiFi we have previously connected to and also send out beacons when not connected trying to connect with those particular WiFi routers,...
0
votes
2answers
118 views

Is every packet in a home Wi-Fi which has say, AES password for connection, encrypted using the same password?

If there is an intruder in a LAN who knows the encryption type and password, will he be able to monitor all the packets which are in the LAN? Suppose someone on the LAN is visiting HTTP sites, which ...
1
vote
2answers
13k views

I couldn't deauth any devices using aireplay-ng command in kali linux

I am using Kali linux. I've updated all tools and services by apt-get update and apt-get upgrade. I was using aircrack-ng for pentesting my wlan network. I wanted to deauth any device connected to my ...
2
votes
1answer
8k views

Honeywell WiFi thermostat security

I recently purchased a Honeywell thermostat with a WiFi connection, and I haven't been able to get it connected to my network yet. According to a representative, the network name and password are ...
0
votes
0answers
62 views

airodump gets handshake but aircrack does not find it

I am trying to do the Penetration Testing on VMWare Kali Linux in windows I put the command to capture the handshake trace, and airdroump show I get the handshake sudo airodump-ng -w fuck -c 2 --bssid ...
0
votes
1answer
61 views

How and what can attackers use Rogue AP attacks for? [closed]

I have some questions about rogue access points. How attackers can get victim's creds over secured HTTPS websites? Can attackers do this kind of attack only by using basic tools + sharing the AP ...
0
votes
1answer
137 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
4
votes
2answers
183 views

Fake AP for Staff Security Awareness

We are working on an activity to train staff about security. Is there any way to spoof the company's guest router and ask staff to provide login credentials (as public wifi does) and when they do that,...
2
votes
1answer
210 views

Monitoring nearby WiFi clients

I know that a WiFi adapter can scan for active BSSIDs, and that in monitor mode it can scan all unencrypted traffic. What is the best way to list nearby WiFi clients from Python? I understand that ...
0
votes
1answer
91 views

If my home router password was reset, is that a sign of a security breach?

Recently I started having issues with my home Wi-fi connection. My devices showed as connected to the router, but no Internet was coming through. While trying to log into the router through my browser ...
26
votes
1answer
7k views

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks? WPA/WPA2 Enterprise using 2048-bit RSA public-key WPA/WPA2 Personal using 63-character ...
0
votes
1answer
123 views

How are keys negotiated in wpa-eap?

Question about PEAP-MSCHAPV2 on RADIUS. After MSCHAPV2 success keys are extracted from TLS context. Then it sent to AP. Client failed to connect WiFi (or eapol, etc) with my handmade RADIUS Access-...
0
votes
0answers
126 views

Someone connected to my hotspot. Are my phone and laptop now compromised?

I have been using my android phone as a wifi hot spot for my laptop over the last few days so I can access the internet. I've been in a new location with no other personal devices nearby, and the hot ...
0
votes
1answer
133 views

Airmon-ng/Airodump-ng - Low Beacon Count on certain networks

It's been a few years since I've played around with this so I'm not sure if times have changed. When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
0
votes
1answer
2k views

Aircrack-ng Windows 10 with USB WiFi in Promiscuous mode

I have seen many tutorials and lessons about how to use aircrack-ng suite in Linux. Can I use this suite in Windows 10? If so, from where can I download binaries safely? (if you google, there are ...
2
votes
1answer
283 views

Why does WiFi deauthentication need multiple packets to work?

I am trying to understand a common "problem" when injection deauthentication frames in 802.11 networks. My goal is to cause a client to re-authenticate (like one would do, to capture a 4-way-...
0
votes
1answer
682 views

Can't see data packets when capturing in monitor mode

On Kali Linux, I have an Atheros wireless adapater. I'm trying to capture data packets off the air and decrypt them as an exercise. The problem is that when I turn on the wifi monitor mode and choose ...
4
votes
1answer
140 views

Does creating an Evil Twin require the network password in order to work?

I am currently trying to better understand this attack. If the network is open ie, not password, I would assume that it would be super easy for the evil twin to work. If I understand correctly, ...
0
votes
1answer
72 views

Catch enough IV to be in the FMS attack

I am doing WEP attack test using FMS method (Fluhrer, Mantin and Shamir), but not capturing enough 4,000,000 to 6,000,000 IV. Please show me how to catch enough IV.
-2
votes
1answer
74 views

How to Prevent a Hacker From Causing Damage if Connected to the Same Router

While using a router that I do not own, and suspect high odds of malicious users' concurrently connecting to it, how can I prevent them from causing any damage to me (injecting malware, stealing ...
2
votes
3answers
2k views

How to investigate my wifi router for devices which are disconnected earlier

I have a D-link 600M router with a simple WPA2 password that got cracked. 60 Gb of data was downloaded (I think they downloaded torrent movies), which resulted in the renewal of my data plan. I ...
1
vote
2answers
1k views

aircrack-ng issue: No mon0 when run "airmon-ng start wlan0" and "No such BSSID available"

I have read many threads on StackExchange and some other blogs but none helped me. The issue is with aircrack-ng on Kali Linux. It gives me error No such BSSID available when I run aireply-ng. I think ...
0
votes
2answers
194 views

If I am trying to clean install a MacOS with internet recovery, is it safer to use mobile network than WIFI network?

I just clean installed my MacOS Catalina on my MacBook due to virus on my PC that I worried got on my MacBook via usb file transfer. I did an internet recovery to reinstall MacOS Catalina with my ...
0
votes
1answer
678 views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
1
vote
1answer
268 views

Can my online activity be detected with this set up?

Here's my situation. In the past several months, I've had my credit card information stolen twice and Instagram account hacked into. I'm hoping this is just bad luck, but I'm a little paranoid now ...
1
vote
1answer
154 views

WPS PIN and key

I was testing how WPS works on my home router and tried to gain access with a tool I found on github called airgeddon. Problem is, I got the PIN down (the PIN I wrote down below is made up, it's ...
0
votes
0answers
29 views

Fixed Channel : -1 ( in Scanning and deauth)

I was using Alfa awus1900 (Realtek 8814u) wifi adapter to test my wifi but from this point, it always shows fixed channel -1 while scanning a particular bssid and on deuath also and after using --ig ...
7
votes
1answer
45k views

What are WiFi certificates used for? What are they?

Recently my university updated the certificates for authenticating on their WiFi network. I was hesitant to accept it because I wasn't sure what accepting it entailed or even what it was and what it'...
4
votes
2answers
1k views

How is TSC (TKIP sequence counter) calculated, in WPA?

I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images: ...
0
votes
0answers
1k views

besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)

Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200 Fresh Install of Kali Linux, fully updated (not on a VM) I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
8
votes
2answers
7k views

Why does a deauth attack work on WPA2 despite encryption?

Given that WiFi packets should be encrypted if WPA2 is used, why is it that a deauth attack can be successful? Shouldn't the machine know that the message is illegitimate due to the fact that it would ...
0
votes
0answers
54 views

Hibernating printer to minimize attacks via Wi-Fi Direct

I upgraded a dinosaur multi-function printer (MFP) to a less prehistoric model [1]. "How convenient!" I thought of the Wi-Fi Direct, considering that I'm (lucky enough to be) working from ...
66
votes
3answers
15k views

Why does Windows store Wi-Fi passwords in a reversible format?

Running netsh wlan export profile key=clear in PowerShell will dump your current stored Wi-Fi settings, including the password, into xml files inside of whatever directory you are currently in. Why ...
18
votes
4answers
210k views

Can my family see what sites I visit while I am on their wifi?

I will be going on vacation for a few weeks to my family home and will be using their wifi for work. The problem is, I am a cam model, and do NOT want them to know that I am visiting the sites let ...
0
votes
2answers
183 views

How Wifi prevent hacking in the same network?

We all know that the client device and WiFi AP will perform the 4 way handshake to generate the session key (PTK). Here is the recap of the 4 way handshake. 1.Client device<-----ANonce-----WiFi AP ...

1
2 3 4 5
28