Wireless security topics including 802.11, Bluetooth, and others.
0
votes
1answer
21 views
What security features to look for when purchasing an ADSL wireless modem?
I'm going to buy a new ADSL wireless modem, and what really matters to me is security. So, what security features should I look for in modems? How should I compare the modems in terms of the security ...
1
vote
1answer
34 views
Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?
I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities.
What I am really unable to realize is why it ...
1
vote
0answers
50 views
802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)
So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
1answer
32 views
Does Windows 7 have built in wifi deauthentication attack protection?
I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be?
I've got ...
0
votes
0answers
58 views
Whole system ACK flood attack making internet slow
Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
0
votes
3answers
49 views
Do i need to have Airpcap?
Hi I am learning system security in an online course, in a practical experiment I tried to monitor the traffic through my router using wireshark1.10.3 but i have a feeling that it only sensing traffic ...
1
vote
1answer
42 views
Locate rogue wireless access point using Kismet data
Is there any way how to use Kismet data to locate rogue wireless access points?
1
vote
1answer
49 views
Wireless Positioning System (WPS) works without intenet? how does it even work?
As much as I understood (correct me if mistaken); Wifi Positioning System has a network of routers some sort of, and when I plug in my new device, by using it's older devices which's locations are ...
1
vote
1answer
52 views
Wireless Security Pen testing Setup
I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
0
votes
1answer
58 views
Security of Moblie Hotspot (4G LTE, WiFi) vs. Apartment Complex Cable Internet
The overwhelming majority of my banking is done online. As such, I try to be as cautious as possible. I am moving into a new apartment in a few months which offers internet. (I am not sure whether it ...
2
votes
1answer
54 views
Are there any known attacks for a laptop with the wifi connection turned off?
I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
1
vote
3answers
126 views
Protecting wireless network
My wireless network protected under WPA-PSK/WPA2-PSK protocol.
Is there a good reason to change the default user/password for the router management interface?
What would it take for an hacker to ...
0
votes
1answer
20 views
How to configure Kismet to redetect same BSSIDs in a loop?
So I am working on a tool to detect any wifi device using Kismet.
When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
0
votes
0answers
31 views
Scapy capturing Dot11 headers windows
Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
1
vote
2answers
216 views
Getting access to MAC address of access point from a device wired to the network
My home network consists of a router (with wired and wireless connections), and a separate access point used to repeat the router wireless signal.
A device is further wired to the access point; it ...
1
vote
0answers
27 views
What are the security implications of pairwise master key caching in Wireless Networks?
I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
1
vote
5answers
152 views
“Safe” public WiFi [duplicate]
Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7):
I have file sharing turned off (in "advanced ...
2
votes
0answers
92 views
Verizon wireless router is pinging my web server - is this ok or bad? [closed]
So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
3
votes
2answers
283 views
How do I securely separate a wireless subnet from the wired network?
My setup looks like this:
In the interest of security, I'd like to separate the wired network (where the Workstation is plugged in) from the wireless subnet. I don't trust some of the devices in ...
3
votes
4answers
289 views
How to stay anonymous in public wireless network?
If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
0
votes
1answer
81 views
Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)
It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to.
Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
1answer
40 views
Is MS-CHAPv2 incompatible with securely stored passwords?
I have a directory service that can speak a number of protocols and is used for user authentication. Currently user credentials are stored using Bcrypt to protect them in case of a compromised ...
1
vote
1answer
260 views
WPA 4 way handshake and authentication
I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication.
Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I ...
0
votes
2answers
227 views
Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?
Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?
I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
2
votes
2answers
147 views
Can WiMAX track its users' geo position?
We all know that if you carry a GSM terminal with you, its location is being tracked and stored in operators' databases without any need of cooperation from the terminal itself.
Is tracking user's ...
1
vote
2answers
96 views
Antivirus / Wireless PCI v2 Controls Scope
Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
2
votes
1answer
140 views
Kismet Output Shows 3 Possible Encryption Options, Which one?
Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network.
Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
3
votes
1answer
177 views
Strange packets coming over wireless, looking for clues
While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
1
vote
0answers
220 views
Where does the WPS Pin fit into the 4-way-handshake?
So I found a diagram online, that shows the 4-way-handshake:
The way I understand it, when a station (STA) is trying to authenticate to an access point (AP), the AP sends the ANonce (authentication ...
1
vote
2answers
568 views
Is it practically possible to spoof a WLAN access point?
I want to try something out, but I wanted to see other opinions from you guys.
What I have:
WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
0
votes
3answers
122 views
Trace wireless connections in airplane mode
I was wondering if turning on Airplane Mode really disables all wireless connections.
If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
1
vote
1answer
265 views
Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?
I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
7
votes
4answers
475 views
Password-less network in skyscraper office
If a company has offices way up in a skyscraper, is it acceptable to have an open network without a password, as an easy-to-use courtesy to visiting guests?
The only ones that possibly would be able ...
19
votes
1answer
680 views
Vehicle remote key security
How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key?
How do car remote keys work? Do they use some kind of private/public keys, encryption?
...
4
votes
1answer
420 views
Hotspot with same SSID, how does authorization work?
My university has a wireless network I log into with my username and password. It's using PEAP. My phone and laptop automatically connect to this SSID when they detect the network.
If someone sets up ...
0
votes
3answers
537 views
Reaver returns different WPS PSK and AP SSID each time it finds correct PIN
I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
-4
votes
2answers
187 views
What kind of Wi-Fi security protocol does not use encryption?
I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
0
votes
3answers
130 views
Can a computer's contents be downloaded wirelessly?
So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network?
As a Ruby on Rails professional, ...
1
vote
2answers
1k views
ARP poisoning between a wired and wireless network
How can a ARP-Poisoning attack work in a mixed (wireless and wired) network?
Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
0
votes
2answers
59 views
Can I communicate with a wireless device, without logging in the same LAN?
Suppose there are three devices:
WPA2 protected AP
linux laptop, accessing internet through tha AP
linux laptop, not connected to the AP
I own the third device and do not know the AP's password. I ...
0
votes
1answer
136 views
How do I map all active wireless devices inbound?
In any residential building, there is a multitude of WPA2-protected wireless access points.
Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...
1
vote
2answers
568 views
Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)
In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...
17
votes
2answers
3k views
How is wireless WiFi password cracked?
Let's say I have a wireless network that is password protected.
What procedures can an intruder take in order to be able to gain access to my wireless network, or at least be able to decipher the ...
0
votes
2answers
252 views
Cookie stealing, what prevents a rogue wireless AP from stealing website cookies?
If you set up a rogue AP with the same SSID as a commonly-known wireless access point, what prevents you from forging DNS queries answering with your own web server and stealing people's login ...
0
votes
2answers
294 views
Is there a way to configure WPA2-PSK to provide Forward Secrecy?
Is there a way to secure an wireless connection against a decryption attack where the PSK is known (E.G. Airdecap-NG)? Is it possible to configure Forward Secrecy on 802.11 Wireless Connections?
2
votes
3answers
6k views
Access router if you don't know password
At home I have a wireless cisco router. Unfortunately I wasn't smart to change its ip or passwords. So anyone who is connected to it can access 192.168.0.1 and log in as admin using password admin and ...
4
votes
1answer
3k views
Is brute-forcing the only way to crack WPA?
I don't know much about how WPA algorithms work internally. Is brute-forcing an AP the only way to crack WPA? (or to get associated with AP)
Another question is about Reaver-WPS, what if an access ...
-4
votes
1answer
229 views
How to prevent malware infection and file accessibility through a wireless router? [duplicate]
The answer suggested in the 'duplicate' is about a different issue. But since my original wording of the question seems to have not been clear - here's a second attempt:
Is there any danger of any of ...
3
votes
3answers
186 views
How do open (no password) wireless networks deal with abuse?
Many places today such as restaurants, malls, and other public places have free and open WiFi that does not need a password or login information to access. That means that anyone, even people outside ...
1
vote
1answer
391 views
Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop
I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well.
My security question are:
Is there a way to completely disable the ...
