Questions tagged [wifi]

Security for 802.11 wireless networks.

119 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
1
vote
0answers
704 views

Replay attack in Wi-Fi (802.11) network

I am trying to create a small smartphone activated lock for my house via Wi-Fi. The setup is like this: The solenoid of the lock is connected to an esp8266 that acts as an access point, and has an ...
1
vote
0answers
262 views

DoS attack to device not connected to WiFi

I would like to know if there is any attack to DoS a device (NOT AN AP) that is not connected to any WiFi network. Using Probe Request frames I can obtain the MAC address. I can't 802.11 deauth ...
1
vote
0answers
100 views

Forward packages to Access Point in KRACK attack

I am investigating the KRACK attack based on the published paper and their youtube video. I largely understand the attacks proposed in the paper as they are except for the completion of the ...
1
vote
0answers
164 views

How effective is WiFi deauthentication attack performed using ESP8266?

There is this tiny ESP8266 WiFi module which can be bought for ~$2. There are projects on Github as well that can turn this cute little module into a big devil (example). I wonder what is the ...
1
vote
0answers
1k views

Different CRC32 implementations? different results?

So recently I managed to implement the Caffe-Latte attack in python. I got stuck for two weeks because the final ICV wouldn't match. After some digging around I found that airbase-ng (which already ...
1
vote
0answers
3k views

Unknown device in home network

I have a home network that is behind NAT. My router IP address is 192.168.0.1 and DHCP is configured to provide addresses from the 192.168.0.1/24 range. My desktop is connected trough the ethernet ...
1
vote
0answers
392 views

How can I capture a chronological record of the clients connected to a specific standalone AP?

I want to have a chronological/historical graph showing what times each client was connected to an AP using either airodump-ng with a simple script or some other free and open tool.
1
vote
0answers
61 views

Is this system of tracking users via Wi-Fi secure?

I am trying to make an app which will be used to track the presence of the users in a location, using the Wi-Fi hotspot of the location. The purpose is to know which user was at the location for how ...
1
vote
0answers
46 views

What happens when an attacker sends fake nonce in TKIP handshake?

The TKIP handshake is halfway completed; the access point and station have exchanged the first two messages. Now, before the access point can send the third message to the station an attacker sends a ...
1
vote
0answers
96 views

What will happen if WEP reuses a challenge?

What will happen if a WEP authentication challenge string is reused? If the access point ran out of unique random numbers and reused one then what would happen? I'd think that if challenges were ...
1
vote
0answers
131 views

mdk3 beacon pwning not detected by other devices

I'm new to wireless security. I'm trying to pwn beacon frames to announce a new access point using mdk3. However, when I run the command I get the following result where the MAC address is not ...
1
vote
0answers
147 views

Can MDM on iOS restrict which WiFi networks are accessible?

I'm evaluating MDM solutions for iOS devices that need to be restricted in what WiFi networks they can attach to. It would be great if I could only allow connections to Networks A and B and ban all ...
1
vote
0answers
209 views

Is AirPlay at attack vector into a private network?

Our software dev team has an Apple TV and we want to have it connected to the corporate network to be able to reach internal resources while testing custom apps. Our ops team does not want it ...
1
vote
0answers
1k views

How to get 802.1X credentials with hostapd-wpe?

I've been using hostapd-wpe to create fake access points and trick clients into connecting to them. This plan always worked very well for "normal" WPA2-Enterprise networks, as I've always been able to ...
1
vote
0answers
254 views

MAC spoofing under a OPN Access point HTTP does not work

I want to do a demo on the wifi security. So, I have one Wifi router and two client. I configured my router without security (OPN) and with a MAC filter. One of the two client is connected to the ...
1
vote
0answers
679 views

WifiPhisher not creating a fake access point

I recently came to know about WifiPhisher. To test it, I set up an access point using my Windows laptop and tried to obtain its password using this tool in my Ubuntu machine. So, when I run the ...
1
vote
0answers
223 views

Neutralizing or Migitating ARP spoofing once detected

I've seen a few methods to detect ARP Spoofing attacks through code(such as this), and ways to defend against these attacks through software and switches (like arp spoofing protection on LAN). How ...
1
vote
1answer
116 views

Securing a Personal Hotspot

I'm buying a brand new phone, added to it: a new line and SIM card, along with a brand new laptop, to use my phone's network as a hotspot. I will not be using these devices for anything but personal ...
0
votes
1answer
50 views

aircrack-ng on Raspberry pi 3 and WiFi adapter

I am just getting into ethical hacking and cybersecurity and would like some advice regarding USB Wi-Fi adapter. I am hacking on Raspberry PI 3 which is running Kali Linux. Furthermore, I have been ...
0
votes
0answers
63 views

airodump gets handshake but aircrack does not find it

I am trying to do the Penetration Testing on VMWare Kali Linux in windows I put the command to capture the handshake trace, and airdroump show I get the handshake sudo airodump-ng -w fuck -c 2 --bssid ...
0
votes
0answers
127 views

Someone connected to my hotspot. Are my phone and laptop now compromised?

I have been using my android phone as a wifi hot spot for my laptop over the last few days so I can access the internet. I've been in a new location with no other personal devices nearby, and the hot ...
0
votes
0answers
29 views

Fixed Channel : -1 ( in Scanning and deauth)

I was using Alfa awus1900 (Realtek 8814u) wifi adapter to test my wifi but from this point, it always shows fixed channel -1 while scanning a particular bssid and on deuath also and after using --ig ...
0
votes
0answers
54 views

Hibernating printer to minimize attacks via Wi-Fi Direct

I upgraded a dinosaur multi-function printer (MFP) to a less prehistoric model [1]. "How convenient!" I thought of the Wi-Fi Direct, considering that I'm (lucky enough to be) working from ...
0
votes
0answers
87 views

How can I add some probable Keywords to hashcat, so I can Brute-Force attack a WPA2 Network faster

I´m trying to brute force attack a WPA2 Network with Hashcat and a wpa2.hccpax file, but when I do it says that it can take 45years to brute force it. So I had the idea that probably the network I´m ...
0
votes
0answers
114 views

ESP32: Secure WiFi credentials via WebCrypto?

Background information: I am not a computer scientist. However, in a research project I am currently building a ESP32-based sensor. Multiple sensors of this type are going to be used by multiple users....
0
votes
2answers
118 views

Is every packet in a home Wi-Fi which has say, AES password for connection, encrypted using the same password?

If there is an intruder in a LAN who knows the encryption type and password, will he be able to monitor all the packets which are in the LAN? Suppose someone on the LAN is visiting HTTP sites, which ...
0
votes
0answers
106 views

aireplay-ng (injection) is not working when monitor mode is enabled

I believe my card supports injection. If I start a terminal and run aireplay-ng -9 wlan0 I get this result: ┌──(root💀kali)-[/home/kali] └─# aireplay-ng -9 wlan0 ...
0
votes
0answers
73 views

Does my wireless adapter support the packet injection if it can send deauth packets?

When somebody sends the deauth packets, does it mean that the deauth packets are the packet injection proccess? Does my wireless adapter support the packet injection if it can send deauth packets?
0
votes
0answers
1k views

besside-ng "bad beacon" error when attempting to deauth (aircrack-ng)

Equipment: Alfa AWUS036ACH Wi-Fi adapter AC1200 Fresh Install of Kali Linux, fully updated (not on a VM) I have been running across this same "bad beacon" error (sometimes with "DEAUTH&...
0
votes
0answers
14 views

Whether WPA2 allows a high frequent login rate and times?

In this assumptive scenario, there is a WIFI point(SSID: sscuu-1x), It can be found using airport: $ /System/Library/PrivateFrameworks/Apple80211.framework/Versions/Current/Resources/airport en0 scan ...
0
votes
0answers
88 views

How does karma attack work on multiple devices in the same time?

Like when you open the network manager(the wifi list ) in the attacked devices while the attack is on, you see different fake networks on each device which is normal as it responds on the devices ...
0
votes
0answers
55 views

NEST Camera WiFi security disruption

Last week one of my NEST WiFi cameras was knocked offline for about 90 seconds. Before this comms loss, we see from the video that someone was using a flashlight and walking towards the camera before ...
0
votes
0answers
91 views

Can a website that I access via 4G network know my location details?

Consider me connecting a smartphone to a 4G network at home. When I check my ip on www.whatismyip.com, it shows a different ip as well as physical location from the one I have been using on my home ...
0
votes
0answers
49 views

Aruba ClearPass WiFi DV/OV/EV Certificate

Our ClearPass RADIUS server currently has a Sectigo DV certificate and I need to replace it (for issues unrelated to this question) and I am wondering if the level of verification of the certificate ...
0
votes
1answer
72 views

Catch enough IV to be in the FMS attack

I am doing WEP attack test using FMS method (Fluhrer, Mantin and Shamir), but not capturing enough 4,000,000 to 6,000,000 IV. Please show me how to catch enough IV.
0
votes
0answers
360 views

Why my card changes from WPA Handshake to PMKID or vice versa just by airodump-ng

I am running Kali linux 2020.3 on VBox on Windows 10. I put my wireless card AWUS036ACH chipset Realtek RTL8812AU in monitor mode using airmon-ng start wlan0. Then i use airodump-ng wlan0 to capture ...
0
votes
1answer
695 views

Can't see data packets when capturing in monitor mode

On Kali Linux, I have an Atheros wireless adapater. I'm trying to capture data packets off the air and decrypt them as an exercise. The problem is that when I turn on the wifi monitor mode and choose ...
0
votes
0answers
64 views

Channel the VPN through a WiFi hotspot

Suppose that I have my mobile connect with a VPN and I use my mobile as a WiFi router to provide internet to a laptop. If I check my ip from the mobile, it is correctly the ip of VPN while if I check ...
0
votes
1answer
133 views

Airmon-ng/Airodump-ng - Low Beacon Count on certain networks

It's been a few years since I've played around with this so I'm not sure if times have changed. When using AR7921 chipset (Alfa AWUS036NHA) on Ubuntu 20.04 I can see many networks using the following ...
0
votes
0answers
59 views

Possible data leakage and traceability regarding mobile personal hotspots

The question Say, one may use a mobile phone's personal hotspot functionality to broadcast a message locally via the ESSID, like "Happy Birthday Lilian" or "Stand with Hong Kong". Assuming such ...
0
votes
0answers
133 views

WiFi channel-based man-in-the-middle attack implementations

Is there a working open-source implementation of a WiFi channel-based man-in-the-middle attack out there? I have been looking for it for a while and what I found so far was this python package which ...
0
votes
1answer
137 views

Using an active or passive scan, can I detect all devices connected to or transmitting via a Wifi network?

I know that it's possible to do a passive scan on all channels to see if an access point sends a beacon. However, is it also possible to listen to general Wifi traffic on that channel and assemble a ...
0
votes
1answer
126 views

How are keys negotiated in wpa-eap?

Question about PEAP-MSCHAPV2 on RADIUS. After MSCHAPV2 success keys are extracted from TLS context. Then it sent to AP. Client failed to connect WiFi (or eapol, etc) with my handmade RADIUS Access-...
0
votes
0answers
106 views

How to identify a unidentified PSK wifi encryption

I have an unidentified PSK encryption in airodump's output (see red square on screenshot) and I would like to get more information about the encryption method used by the network: do you know any tool ...
0
votes
0answers
263 views

How could a WPA2 WiFi with a 40+ character random password have been penetrated

I can confirm an intrusion from an unknown MAC address (identified as a Realtek device), getting a new, valid IP from the DHCP pool, and using the network for roughly 1 hour. The network is WPA2 - 1 ...
0
votes
0answers
77 views

Laptop WIFI attack insecure

If a laptop has WIFI but it is disabled in the Device Manager, can it still be used to gain access to the machine?
0
votes
1answer
690 views

Aireplay-ng deauth has no effect

I am trying to deauth my laptop which is connected to my home wifi. aireplay-ng has no effect on my laptop. The commands I used are in order airmon-ng start wlan0 then after getting the mac address ...
0
votes
0answers
91 views

How do WiFi APs distinguish between text messages and media content for encrypted messengers?

I recently took a flight with Delta airlines. They offer in-flight WiFi for messenger services iMessage, Facebook Messenger and Whatsapp and state that Words and emojis accepted. Sending photos, ...
0
votes
0answers
94 views

nethogs finds many connections without process ID

Monitoring my network connections with nethogs (on ubuntu machine), I find many connections, which I cannot identify. The columns are PID USER DEV SENT RECEIVED and most connections are owned ...
0
votes
0answers
237 views

Why doesn't the fluxion attack steal credentials when authenticating to the network?

I ask this question because i am not happy with the answer here In a normal attack such as fluxion. You send DEAUTH packets to the victim wifi. Clone their access point and host an open wifi. Let the ...