Questions tagged [wireless]
Wireless security topics including 802.11, Bluetooth, and others.
425
questions
0
votes
0answers
48 views
Why doesn't the fluxion attack steal credentials when authenticating to the network?
I ask this question because i am not happy with the answer here
In a normal attack such as fluxion.
You send DEAUTH packets to the victim wifi.
Clone their access point and host an open wifi.
Let ...
1
vote
2answers
129 views
Why do evil twin attacks against WiFi use a captive portal?
I was recently the victim of an evil twin attack on my WiFi network, probably by the new upstairs neighbors. It prompted me, with a captive portal, saying there had been an update and I needed to ...
1
vote
1answer
84 views
MAC/IP address hiding
I am doing some experiments with wireless protocols on ns-3. What I want to ask is how can I hide MAC address/IP address, because I need it for my experiments? Is it possible to use encryption on ...
0
votes
1answer
121 views
Router administration page is served over HTTP
My wireless router admin page does not include https option.
It is always served over http. This is obviously a concern in case someone is sniffing the network and can read my password in plain text.
...
0
votes
2answers
112 views
unauthorized devices appear in windows 10 network drive SMB [closed]
Few days ago I was trying to access a shared folder via SMB on Windows File Explorer and noticed 3 strange mobile phone devices appear listed in the network drive. I never owned any of the mobile ...
3
votes
1answer
157 views
How do you prevent/guard against a wireless disassociation attack [duplicate]
Going over the security+ lectures by professor Messer here, he explains and demonstrates a wireless disassociation attack very well. But no where in the video does he explain how this type of attack ...
1
vote
1answer
209 views
Capturing traffic on WiFi Network using Wireshark [duplicate]
Is it possible to capture, using Wireshark, regular data sent by another machine inside my Wireless LAN?
0
votes
1answer
282 views
Detect / Prove and Prevent Wifi Deauth attack
I'm suspecting that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi ...
1
vote
2answers
256 views
How to get result from airdump-ng on Ubuntu 18.04 LTS?
Issue: when I run airodump-ng wlp3s0mon, no results appear.
I recently installed all kali linux tools on Ubuntu 18.04 LTS from this git repo https://github.com/LionSec/katoolin
My chipset is the ...
1
vote
1answer
62 views
Where does last 4 bytes of hmac go in wpa2 mic?
The wpa2 mic is a 16 bytes array which is built by Hmac(sha1)
,But the Hmac(sha1) returns 20 bytes array.
So where does that 4 bytes go?
0
votes
0answers
39 views
Can an IDS be used for detecting frames (not packets) from an non-authenticated station
Can an IDS, like snort, be used to detect Layer 2 network frames from a system i.e a system is trying to send a frame to the AP and whether Snort can work on the frame based on the rules?
2
votes
1answer
113 views
Are there any known exploits against bluetooth mice or keyboards?
Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard.
Are there known exploits that can remotely inject malware directly over ...
3
votes
1answer
100 views
What are the countermeasures against key cloning?
I’ve looked into the techniques of cloning the 315Mhz and 433Mhz remote car keys and I’m wondering what’s the countermeasure one can provide against wireless radio key lock? Since the radio signals do ...
8
votes
1answer
270 views
How do rolling code fobs and receivers synchronise?
This is a follow-up question to my earlier one: Does pressing a car remote many times offer denial of service attack for rolling codes?
I want to emphasize that I am asking this question more to ...
148
votes
3answers
17k views
Does pressing a car remote many times offer denial of service attack for rolling codes?
My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
2
votes
1answer
126 views
How does wireless keyboards' encryption prevent frequency analysis?
I've found very little information on this topic after much googling. The only partial answer I found was by Microsoft: Microsoft_AES_Technical_Factsheet
By adding random data to each message, each ...
1
vote
2answers
91 views
Is there any methodology to detect smart deauthentication attack?
I'm a project student in IIT-Hyderabad. I have been working in Wifi security domain for my M.Tech. In particular, I chose de-authentication attack.
Whenever I sent De-Auth frames continuously to APs ...
0
votes
4answers
183 views
Does improving password complexity improve the security of wireless networks?
Does having a complex preshared key improve the security of WPA2-PSK, or is having even a simple PSK enough to secure the wireless network?
2
votes
0answers
58 views
How to identify the communication protocol used in a wireless device?
I really hope that this is the right place to ask.
I need to analyze a baby monitor for any security or privacy weaknesses.
The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
1
vote
1answer
87 views
Is it possible to eavesdrop the wireless data transmission without being authorized to a router?
I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
-1
votes
1answer
93 views
What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?
If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
1
vote
2answers
1k views
Airodump-ng : why are BSSID not associated?
Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run.
I have a few questions :
Why do BSSIDs show as "not associated" (note: not all of them show as ...
1
vote
2answers
424 views
Prevent Text Spoofing - Best methods
In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office.
After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
2
votes
0answers
73 views
Why do car key remotes not use E2EE?
Background
I read an article about how car keys that remotely open one's car are not secure. This answer also talks about different encryption methods being insecure.
The article mentions that ...
0
votes
0answers
61 views
Kismet Ethernet MAC Address Showing Up
I have a Rasberry Pi running Kismet set to hop to different channels.
I keep finding that, even after reconfiguring my settings to disallow local network access through wireless that an Ethernet ...
0
votes
1answer
466 views
4G Pocket WiFi - IMSI Catcher?
Nearly all mobile phones are vulnerable to IMSI catcher attack's fake mobile networks. They can access storage, inject rootkits/backdoors, turn the microphone on view internet traffic even with a VPN ...
-2
votes
1answer
60 views
Which brand of USB key storage and external USB storage can prevent wave or wireless read? [closed]
Which brand of USB key storage and external USB storage can prevent wave or wireless read?
I find some has military encryption USB key storage
, but do I need to encrypt files before saved in these?
...
2
votes
2answers
75 views
My AP is probing other device?
I just installed kismet 2018 Beta update on my kali and test run it on my host but i came across something that i dont understand and i would appreciate if someone would explain to me.
When i check ...
1
vote
1answer
436 views
ARP request replay attack - why do APs work the way they do?
ARP request replay attacks are based on the practice that wireless access points repeat ARP packets injected into the network, and since these ARP packets are encrypted, they also carry the IV with it....
1
vote
1answer
98 views
Is it possible to push a device from a private WiFi in order to decoy it to a public WiFi?
Regarding How to force clients to connect to WiFi automatically? and this situation:
my neighbour is connected to his private Wi-Fi
I have a Pineapple Nano broadcasting public SSID's (McDonald, ...
5
votes
1answer
278 views
How do TV satellites authenticate the receiving signal to make sure its from the TV station that its claiming to be and is not spoofing? [duplicate]
What stops criminals from jamming a channel by sending spoofed signals to its satellite in space, acting like they are from the TV station and therefore hijack or jam the channel?
How can the ...
0
votes
1answer
44 views
wireless point-to-point security
I have a remote site where I need to bridge approx 700m distance either with fibre or wireless for a backbone internet connection.
The digging would cost a bit more and many suppliers are offering ...
0
votes
1answer
101 views
How is my employer accessing my router when employer's laptop is wirelessly connected to my home network
I have a modem bridged to a modern router running open source software and heavily secured. I have all connections to the router through a personal vpn from a dedicated provider. During work from home ...
1
vote
2answers
192 views
Can your cell phone transmissions reveal your identity?
Is it feasible for hackers sitting near you to have some sort of RF listening device that uses your phone's transmissions to identify your name or other information that could be used to determine who ...
82
votes
7answers
16k views
Company claims hardwire connections are a security issue
Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
0
votes
0answers
69 views
Capturing Dot11 (802.11) headers on Mac OSX
I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
0
votes
0answers
85 views
Wireshark showing all ports being probed from my tablet
The first two pictures: Wireshark shows a tablet device as the source and my computer as the destination and vice versa. This tablet has never been connected via USB, FTP, BT, nothing to the computer. ...
0
votes
1answer
198 views
Is it possible to make a spoofing attack in a access point with same SSID target network?
With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
0
votes
1answer
600 views
Finding wpa2 key length
Is it possible to determine WPA key length through a successful handshake?
Below is a screen capture showing the packet capture session of interest as displayed in Wireshark:
My question came from ...
1
vote
2answers
626 views
How can hackers do a tv signal intrusion?
How can hackers do incidents like the Max Headroom one?
This is related, but it doesn't answer my question.
6
votes
2answers
75 views
Why WPA2 Client Devices Respond to Any Deauths
A great number of attack methods for WPA2 involve getting a handshake capture. To capture one the fastest way involves sending deauthentication packets to the client forcing him to initiate the ...
5
votes
1answer
650 views
Can a bluetooth speaker contain malware?
Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
1answer
295 views
How can I check if my second hand Apple wireless keyboard contains a keylogger?
I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
1
vote
0answers
73 views
Aireplay issues
I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that...
aireplay-ng -0 wlan0mon
...does work, but...
aireplay-ng -9 wlan0mon
...doesn't
In fact ...
2
votes
1answer
1k views
How vulnerable are rolling codes used in car keyfobs to simple replay attacks?
I've read this question - Vehicle remote key security, and I have a few simpler questions that are not addressed in that one.
I just received a whatsapp viral forward raising a few claims regarding ...
1
vote
0answers
39 views
Video card - pci express security
I recently bought a second hand Nvidia video card which runs in SLI mode with my default video card.
Can it be infected with a malicious program added by the previous owner,
steal data from the ...
-2
votes
2answers
207 views
How to get a thorough view of wireless router's logs?
I am trying to attack my wireless router using Kali Linux for learning purposes. When I check the wireless router's logs after a successful attack, it doesn't show me the logs related to attacks which ...
0
votes
1answer
92 views
How do Access Points manage attempted Passwords? [duplicate]
How do Access Points check whether the provided password (given by the device wishing to authenticate) is actually the correct password of the Access Point?
If a user attempts to join a secured ...
9
votes
1answer
1k views
Why is WPA3 using 192-bit encryption?
Why is WPA3 going to be using 192-bit encryption and not 256-bit in the security suite?
2
votes
0answers
145 views
Duplicate packets in packet injection
I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
