Questions tagged [wifi]

Security for 802.11 wireless networks.

Filter by
Sorted by
Tagged with
7
votes
1answer
1k views

How to get hold of and use WPA session keys?

I'm testing sniffing and decrypting my WPA2 wifi network traffic. But when using airdecap to decrypt the capture file (created by airodump) using my WPA passphrase I only get broadcast traffic. If I ...
7
votes
1answer
337 views

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

Background A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
7
votes
1answer
597 views

Preventing evil twin WiFi attacks on embedded systems

I've recently been looking at a few of the low-end WiFi modules used in IoT devices, such as the TLGUA06 and ESP2866. As expected, it's possible to deauthenticate these devices by sending a ...
7
votes
1answer
483 views

Is the GTK or MIC in the unencrypted portion of a WPA protected frame?

In order to decrypt traffic you must have all 4 portions of the WPA Handshake. In WPA protected data frames, is there an unencrypted portion of that frame that has some sort of identifiable value to ...
6
votes
3answers
22k views

Intercepting wifi traffic

So people always talk about how if you use http over a shared wifi hotspot, people will be able to see your unencrypted data, but I have never been able to make the direct connection from a network ...
6
votes
4answers
2k views

How can one defend against DoS attacks at the physical layer?

Of course, there's always the odd issue of old microwaves and wireless telephone handsets interfering with Wi-Fi performance. And, in many areas, there's a fair chance that you're going to have to ...
6
votes
2answers
5k views

Wireless hardware with limited range?

I have never used wireless networking at home, but am considering it. Does anyone make wireless hardware designed for single-room connectivity? Several sources have recommended WPA2, but I'd still ...
6
votes
3answers
2k views

Cannot identify or block unknown MAC addresses

I've only got a basic idea about networking, Google is my teacher. Router: Tenda D303 Location: India Connection: BSNL Unlimited 1Mbps broadband. Friends and relatives visit me often, and connect to ...
6
votes
4answers
9k views

Does setting a WiFi AP to channel 14 avoid the most common detection methods used in Europe or the Americas?

The legally allowable band for WiFI in the US covers channels 1-11. Europe goes to 13, Japan to 14. I suspect that most tools use the WiFi driver of the machine and only scan for the channels it is ...
6
votes
3answers
9k views

Why use a USB WiFi adapter with Aircrack-ng?

What are the limitations we have when we are performing aircrack-ng pen testing using laptop's built-in WiFi adapter? Many pen testers are using USB WiFi dongles for this purpose and I wonder why. ...
6
votes
2answers
7k views

Hidden network no beacons

Do hidden networks send beacons? I have seen hidden networks in backtrack and Ubuntu using airodump-ng. The output is weird like the power is shown as -1. Why does this happen? As you can see here ...
6
votes
2answers
14k views

The new CCMP attack against WPA/WPA2 PSK

The use of Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for WPA/WPA2 PSK is being attacked. This is a trivial attack (offline brute force) against the initial ...
6
votes
1answer
2k views

What is the most used WiFi encryption? [WEP/WPA/WPA2] [closed]

I am doing some research on WiFi for my school and one question I want to answer is what encryption is the most used. One day it was of course WEP and now it is WPA2 I assume, but it would be great if ...
6
votes
1answer
235 views

Wireless auto-join on laptops

Maybe I have the wrong idea but this is a question that has been floating in my head for some time. Whenever you use an iPhone (or a Mac, Apple products seem to be more prone to this because it ...
6
votes
1answer
11k views

What's the difference between pixie attack and other attacks on WPS?

I have been studying about the brute-force attack on the WPS PIN, and I understand that because the last digit is the check digit, and that the PIN is divided into two halves in M4 and M6 messages, ...
6
votes
3answers
3k views

Two SSIDs on same Access point- not good?

If I were to offer two networks (one for trusted users and one to visitors) on one physical access point, is this dangerous because a visitor could compromise the trusted network across via the ...
6
votes
3answers
19k views

Is it possible to hide your MAC address before connecting to open wifi?

You hear about black hats working from coffeeshops on public WiFi, but I'm wondering how you would be able to completely mask your IP when doing this. I realize you would obviously use a VPN, but ...
6
votes
2answers
1k views

Can the network administrator of my university see what I have searched on Google?

Before you mark this one as a duplicate, I have indeed seen similar questions here but they do not provide the direct answer I'm seeking. Here are a few details: I've taken google as an example ...
6
votes
2answers
593 views

Is ARP poisoning necessary?

Correct me if I'm wrong but isn't it possible to sniff WiFi traffic in the air? If so, what exactly is the point of ARP poisoning? In this scenario, the attacker would already be authenticated on the ...
6
votes
2answers
2k views

What risks does WPA carry?

A family member of mine would like to be able to play old PSP games online. Unfortunately the device does not support WPA2, and my network is strictly WPA2 AES secured. What are the risks involved in ...
6
votes
2answers
2k views

Securing Apartment Wifi [closed]

I recently moved into a new apartment, and with rent "free fiber connection" was included. I was skeptical, but the building location and proximity to my office was a no brainer. Now I'm regretting it....
6
votes
4answers
22k views

Can I get a virus from connecting to a WiFi network?

Let's say I connect to a local WiFi hotspot with a particularly bad security. I am aware that a hacker may be able to perform the following: Man-in-the-middle attack Snoop on an unencrypted network ...
6
votes
1answer
841 views

Can network admin detect port scan on a certain host?

Say, my laptop is connected to a large WiFi network with many other users. If a port scan is run on my IP by somebody else on the same WiFi network, is it possible for the network admin (or anybody) ...
6
votes
1answer
8k views

AirPcap is end-of-availability. What alternatives do you recommend? [closed]

I've been using Riverbed AirPcap dongles for Wi-Fi analysis for quite some time. But when I am trying to order more, I noticed all their AirPcap devices are end of life by Dec 31, 2017, for reason I ...
6
votes
2answers
2k views

Does TLS authentication encrypt username as well as password?

I connect to my VPN provider using openVPN. The server uses a combination of username / password and TLS authentication. If I am on a public wifi and connecting to my VPN, is my username encrypted? ...
6
votes
2answers
9k views

WiFi security using IEEE 802.1X - how secure is it?

My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
6
votes
2answers
4k views

Wifi security SSID clarification

I've read several Wifi security related questions on here. There are two things related to the SSID which I don't fully understand. Is there a best practice for SSID naming? I know that changing the ...
6
votes
2answers
4k views

Best way to secure Wi-Fi Direct connection

I have setup WiFi Direct connection between two Android devices by using Wi-Fi Protected Setup (WPS) "push button" for authentication.I also want to secure the connection itself by securing the data ...
6
votes
2answers
598 views

Can free Wi-Fi hotspot providers snoop on HTTPS communications?

Every article (and post on this website) I find on public Wi-Fi safety is mostly concerned with other people connected to the same network snooping on our communications. As far as I understand it, we’...
6
votes
3answers
1k views

wlan security - why is it not possible to protect against deauthentication flooding

Wireless security (Wikipedia) describes security issues due to the fact that wi-fi deauthentication packets are unencrypted: Weak PSK passphrases can be broken using off-line dictionary attacks by ...
6
votes
3answers
2k views

Ways to protect phone from hacking through a wifi network when travelling

I'm planning on traveling to a resort in Mexico. The resort offers wifi, but I know someone who recently traveled to this resort and had their phone hacked via the wifi network. I would be wanting to ...
6
votes
1answer
28k views

Rainbow tables/hash tables versus WPA/WPA2

In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks? Is there an advantage of one over the other? ...
6
votes
5answers
2k views

Does WPA2 Enterprise protect against evasdropping from within the network?

At home, I have a simple ISP supplied router where I have set up a WPA2-PSK wireless network for our laptops and other devices. While I played around with Wireshark, I noticed that I could use my ...
6
votes
2answers
12k views

How effective is the iOS “Send All Traffic to VPN” setting at deterring Wifi-based attacks?

iOS version 5 and newer has a setting for VPNs to "Send All Traffic" over that VPN. I think that sending all data to a trusted VPN target would ensure privacy of all communication sent over that WiFi ...
6
votes
2answers
3k views

Is it possible to hack a SSID without actually having to sniff or send deauth frames to a host?

I'd like to know if there exists at least the possibility of a known/theoretical attack on a wireless SSID that does not involve a host within the network, what I mean by this is that some of the ...
6
votes
4answers
1k views

Caught Deauth attempt on wireless network last night. Suggestions on what to do from this point?

Last night around 3-4 am I had noticed my network acting funky.. I flipped my wireless card into monitor mode and boom there was a rogue AP. I then acknowledged that I had seen them and mimic'd the ...
6
votes
2answers
3k views

How to Man-in-the-middle a whole network?

When performing a MiTM attack, you generally need to specify the router's IP address and the "victim" IP address. I'm trying to demonstrate to a business owner why he needs to secure his network, but ...
6
votes
3answers
368 views

KRACK and Keystream

I'm a little bit confused regarding the keystream. When installing the same session key again the nonce will be reset and start again. Session Key + Nonce = Keystream? The Keystream is now the part ...
6
votes
2answers
958 views

What are weak IVs? Can we somehow stop or slow down WEP cracking by avoiding usage of them?

Most of us dealing with wireless security must have cracked a WEP key, and while doing that must have come across texts like this: weak IVs, reveal more information about the secret part of the WEP ...
6
votes
3answers
640 views

Why does switching to “n-only” help preventing attacks on WPS?

I just cracked the access-point (AP) of a friend of mine (Linksys E4200) and we were looking for a way to rid him of the vulnerability. Unfortunately, the E4200 does not disable WPS when you tell it ...
6
votes
1answer
159 views

How can I properly secure the WiFi setup process of an IoT device?

My company develops a WiFi-connected IoT product. I want to make sure that the process of getting the user's WiFi credentials into the device is as safe as possible. At the moment, the product is in a ...
6
votes
1answer
521 views

MITM over wireless

I was trying to perform MITM attack over wireless. The thing I used is airbase-ng --essid "FAKEAP" -c 10 wlan0mon to create a fake access point. This created a tap interface at0 on which I ran isc-...
6
votes
1answer
2k views

Evil twin access point with WPA/WPA2

When I created an evil twin AP with an SSID of someone else's Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with ...
6
votes
4answers
575 views

Building an info sec VM lab - safe to keep on my home network?

I'm a new member making my first post here. I had a very quick, and admittedly basic, question. I'm setting up an info sec lab for the first time at home. I'm trying to build some more technical ...
5
votes
6answers
115k views

If I am not logged into my company's WIFI, can they view my information? Or am I transmitting?

I was at work using my phone. We have an open WIFI, but I did not use it to go online. I was wondering, can my information be viewed or was I transmitting data even though my phone said I was not ...
5
votes
7answers
3k views

What security risks exist in cell phone apps' data transfer?

Smartphones apps transfer various types of data over the provider's data network (or wifi, if enabled). What security risks are there in this transfer, and how can the risks be mitigated? I'm not ...
5
votes
5answers
3k views

Why is public free Wi-Fi available even though many people say it's dangerous? [closed]

There's a long dispute across the Internet community about the risks related to free public Wi-Fi. Some information security-related Web sites which look rather trustworthy even say that you should ...
5
votes
2answers
4k views

How to know if I'm under a MITM attack

If I am connected in a public WiFi, is there any way to know whether I am under attack or not while browsing sites using SSL? For example, if I visit facebook.com and the URL starts with "https://", ...
5
votes
2answers
7k views

Is Double NAT a secure way to create a public wifi network?

I'm trying to create an open, public WiFi network in my house for guests to use, as I am hosting a (somewhat) large party later tonight. However, none of my routers have any built-in guest networking ...
5
votes
3answers
4k views

How to secure an open wifi access point

I have seen tremendous amounts of guides on how to protect yourself when using a public wireless internet connection, but nothing about how to protect your public access point from malicious users. A ...

1
3 4
5
6 7
27