Wireless security topics including 802.11, Bluetooth, and others.
-2
votes
0answers
16 views
Want to know how to configure wireless intrusion prevention syatem [on hold]
I want to make a wireless IPS for my school project.Please suggest me which WIPS software is free to use and how to configure it in detail.
Thanks.
0
votes
0answers
34 views
Capturing Arp-reply packets from all neighbouring networks
actually I want to capture all the arp-reply packets from all neighboring wireless networks, but when I try to do the same, no arp-reply packets from any networks are visible.
Let me make you the ...
0
votes
0answers
38 views
Capturing Dot11 (802.11) headers on Mac OSX
I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
0
votes
0answers
42 views
Wireshark showing all ports being probed from my tablet
The first two pictures: Wireshark shows a tablet device as the source and my computer as the destination and vice versa. This tablet has never been connected via USB, FTP, BT, nothing to the computer. ...
0
votes
1answer
61 views
Is it possible to make a spoofing attack in a access point with same SSID target network?
With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
0
votes
1answer
44 views
Finding wpa2 key length
Is it possible to determine WPA key length through a successful handshake?
Below is a screen capture showing the packet capture session of interest as displayed in Wireshark:
My question came from ...
1
vote
2answers
183 views
How can hackers do a tv signal intrusion?
How can hackers do incidents like the Max Headroom one?
This is related, but it doesn't answer my question.
5
votes
2answers
57 views
Why WPA2 Client Devices Respond to Any Deauths
A great number of attack methods for WPA2 involve getting a handshake capture. To capture one the fastest way involves sending deauthentication packets to the client forcing him to initiate the ...
4
votes
1answer
110 views
Can a bluetooth speaker contain malware?
Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
1answer
118 views
How can I check if my second hand Apple wireless keyboard contains a keylogger?
I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
1
vote
0answers
41 views
Aireplay issues
I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that...
aireplay-ng -0 wlan0mon
...does work, but...
aireplay-ng -9 wlan0mon
...doesn't
In fact ...
2
votes
1answer
281 views
How vulnerable are rolling codes used in car keyfobs to simple replay attacks?
I've read this question - Vehicle remote key security, and I have a few simpler questions that are not addressed in that one.
I just received a whatsapp viral forward raising a few claims regarding ...
1
vote
0answers
37 views
Video card - pci express security
I recently bought a second hand Nvidia video card which runs in SLI mode with my default video card.
Can it be infected with a malicious program added by the previous owner,
steal data from the ...
-3
votes
2answers
76 views
How to get a thorough view of wireless router's logs?
I am trying to attack my wireless router using Kali Linux for learning purposes. When I check the wireless router's logs after a successful attack, it doesn't show me the logs related to attacks which ...
0
votes
1answer
77 views
How do Access Points manage attempted Passwords? [duplicate]
How do Access Points check whether the provided password (given by the device wishing to authenticate) is actually the correct password of the Access Point?
If a user attempts to join a secured ...
9
votes
1answer
851 views
Why is WPA3 using 192-bit encryption?
Why is WPA3 going to be using 192-bit encryption and not 256-bit in the security suite?
2
votes
0answers
73 views
Duplicate packets in packet injection
I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
2
votes
2answers
68 views
Wireless network solution? WPA2/MAC Filtering problems
In short we have 7 Mobile Casio Scanners that seem to be incapable of holding their Wi-Fi passwords, they sometimes lose them for no apparent reason.
We of course, cannot give out the wireless ...
0
votes
0answers
70 views
Would using a 2.4 GHz wireless headset be secure to use?
Thinking about buying an Arctis 7 Wireless Headset with DTS as an everyday Desktop headset.
It only states 2.4Ghz wireless as connection type. Considering mousejacking attacks and bluetooth security, ...
2
votes
1answer
91 views
Is it possible to classify Wi-Fi Security Level without connect to Wi-Fi
Is it possible to classify Wi-Fi Security Level (such as Secure, Non-secure, etc.) without connect to Wi-Fi.
I don't know is it possible, but if not, can we still classify Wi-Fi security level when ...
0
votes
1answer
291 views
How does one go about building a system with which to Van Eck Phreak?
I've been reading plenty on the Internet about Van Eck Phreaking/TEMPEST and I'm curious as to how one might go about building a system to try it out. All I've found so far is this website. It hasn't ...
5
votes
2answers
274 views
What does a VPN NOT protect me from?
At my office we have two wireless networks - an official one, and a "Guest" one. There is extensive filtering on the official one, and using it requires a users work credentials. The Guest one is ...
6
votes
2answers
105 views
Network Access Control for Wireless Network
I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
9
votes
2answers
785 views
WPA3 announced. Really needed?
It seems Wi-Fi Alliance announced WPA3 for the end of 2018.
Anybody knows exactly what is new? features, security improvements, etc...
Is it because of Krack attack? I thought patching WPA2 is enough....
3
votes
1answer
143 views
How UPnP is vulnerable if the attacker is not connected in the same network?
I read a lot about UPnP vulnerability and I understand it to some extent. What I don't understand is how attacker will attack if he is not connected to the same network. I read how attacker can do ...
2
votes
0answers
141 views
Storing Wireless auth certs in a TPM
Within my organisation we're being asked to provide a secure but seamless wireless experience e.g. user logs on to Windows device and are connected automatically to corporate network via wireless. ...
-1
votes
1answer
111 views
Handshake not capturing on wpa-psk/wpa 2 psk
I'm struggling to get a handshake from my router when using airodump.
airmon-ng
airmon-ng check kill
airodump-ng wlan0mon
airodump-ng -c (channel)--bssid(adress)-w (.cap file locand name) wlan0mon
...
0
votes
2answers
110 views
Is it impossible to know if the de-authentication packet has been sent to the victim using Wireshark and mdk3? [duplicate]
I want to know if the clients get disconnected or not without checking there devices while I am outside the network. Is it impossible with WireShark?
1
vote
3answers
345 views
Restrict mobile phones to specific Access Point (WIFI Router)
Is it possible to restrict the access of android phones, iphone, and MS phones and tablets to a specific AP?
I want the corporate mobile device to only be able connect to one specific AP (the ...
50
votes
6answers
11k views
How safe are wifi enabled talking toys?
There have been ads on the radio recently for a wifi enabled toy called Talkies, which are advertised as being able to communicate with app enabled phones, with a "trusted circle" that other phones ...
0
votes
1answer
68 views
Modifying the Ethernet/Wifi driver to get faster Network access? [closed]
I've already asked this question on networkengineering.stackexchange.com, but unfortunately it was marked as Offtopic there.
As far as im concerned the CSMA/CD and the CSMA/CA standard rely on the ...
3
votes
2answers
253 views
Difference between alfa card and my laptop network card?
I'm following a CEH formation in which we have to buy an alfa card.
What's the difference between an alfa card and my laptop's network card?
I thought it was that alfa card can be set in monitor mode ...
0
votes
1answer
211 views
Is TP-LINK TD-W8151N vulnerable to KRACK?
I have a TP-LINK TD-W8151N 150Mbps Wireless N ADSL2+ Modem Router.
Is this model vulnerable to KRACK?
It is not specified in the WPA2 Security (KRACKs) Vulnerability Statement. Will TP-Link publish ...
4
votes
1answer
252 views
Will wireless isolation/AP isolation protect from KRACK?
Will using AP isolation on an Access Point protect connected clients from the KRACK vulnerability on that network?
17
votes
3answers
7k views
Is WPA2-Enterprise affected by the KRACK attack?
From my reading of the whitepaper it is the 4-way handshake that is vulnerable, but WPA2-Enterprise uses a RADIUS server for authentication, so is it also exploitable? And if so, how?
117
votes
3answers
18k views
Why wasn't the KRACK exploit discovered sooner? [closed]
From what I've read, the issue is as simple as performing step 3 of a 4-step handshake and the consequences of performing that step more than once. Considering the complexity of these kinds of ...
0
votes
0answers
561 views
Is it enough to patch the AP to protect against KRACK attacks? [duplicate]
I could not understand from the KRACK paper and site if access points are vulnerable or the attack is a client side attack?
Can patching the AP mitigate all attacks?
249
votes
5answers
28k views
Consequences of the WPA2 KRACK attack
Today new research was published on vulnerabilities in wireless network security called Krack.
What are the real-world consequences of these attacks for users and owners of wireless networks, what ...
0
votes
1answer
228 views
Zenmap: Can't get hostnames for clients just IP addresses
I have run both a quick and intense scan on my network with Zenmap and I can't get the hostnames of the clients. If I do an ARP scan I get some hostnames and if I use Fing app on my iPhone, I can see ...
4
votes
1answer
700 views
Where would I place a sniffer to capture data in a home network with the following topology?
I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
0
votes
1answer
128 views
Mouse receiver shows up as keyboard too - is this an issue?
I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
3
votes
1answer
143 views
How to secure Nikon Cameras open WIFI?
In Nikon digital cameras which support WiFi like D5300 you can browse and transfer the photos by enabling the WiFi and connecting to the camera SSID which is open and do and there is no option to ...
0
votes
1answer
97 views
Captive Portal Security Measures
I am currently working on a Captive Portal solution, which can be distributed in an device that has an ethernet and wlan port. In short, I use iptables to restrict access to all devices unless they ...
5
votes
2answers
589 views
Just how much of a risk am I putting on my network by allowing UPnP
I am facing a serious conundrum (to me at least). Whether or not to disable UPnP on my network. I understand the risk, an infected computer could punch a hole in my firewall, and more infections can ...
1
vote
0answers
64 views
Can a computer be vulnerable to BroadPwn?
There is a lot of info and warnings about most phones using Broadcom BCM43xx WiFi chipset that are vulnerable to remote code execution and full takeover.
What about computers? I saw that MacOS also ...
1
vote
1answer
45 views
Limitations of electromagnetic emanations techniques (such as TEMPEST)
Target isolation
Attacks like TEMPEST seems to work well but what happen if you are one meter away with two or more computers on, let's say the same table ?
I suppose that the recording device will ...
1
vote
2answers
654 views
Airodump-ng doesn't capture handshake or sees any devices connected on Kali, but captures everything on Backtrack. How to fix it? [closed]
I ran into a problem in using kali linux system.
Kali doesn't allow me to see any devices connected to certain spot or capture any handshakes, I know that it can capture them(and see connected ...
3
votes
2answers
273 views
Guest wireless network is directly connected to internal LAN. How bad is this?
At my work, there is a wireless network that is on the same subnet as the servers, printers and user machines. This wireless network allows users to have access to shared network drives as if the ...
4
votes
1answer
506 views
WPA2 and ChopChop attack
I know that WEP is vulnerable to the ChopChop attack. Could the ChopChop attack be carried against WPA2-PSK as well? Some Internet articles suggest this possibility, I want to be sure though.
0
votes
1answer
1k views
Can you use an android device as a wireless adapter for kali linux? [closed]
I am experimenting with Kali Linux. I set up Kali in Virtual Box on a mac. I realized that to do WPA/WPA2 cracking I would need a wireless adapter. Before running out to buy one I thought that I might ...
