Questions tagged [wireless]
Wireless security topics including 802.11, Bluetooth, and others.
0
votes
1answer
22 views
ARP request replay attack - why do APs work the way they do?
ARP request replay attacks are based on the practice that wireless access points repeat ARP packets injected into the network, and since these ARP packets are encrypted, they also carry the IV with it....
0
votes
0answers
3 views
Setting up virtual machines for practicing pentesting. Wifi adapter (D'link dwa125) wont allow bridged vm network [migrated]
Im running Kali 4.18 as host and trying to set up a virtual machine running Windows XP SP3. There is no way for me to connect my desktop to the internet with an ethernet cable, I must connect via wifi....
1
vote
1answer
77 views
Is it possible to push a device from a private WiFi in order to decoy it to a public WiFi?
Regarding How to force clients to connect to WiFi automatically? and this situation:
my neighbour is connected to his private Wi-Fi
I have a Pineapple Nano broadcasting public SSID's (McDonald, ...
0
votes
0answers
10 views
Error Installing Certificate - Cisco WLC - Password protected PEM [migrated]
So I will start with saying, I'm not good at all with certificates, I got this .pem file that I'm going to upload to a WLC for Webauth, since the old one is from GeoTrust.
At first the .pem didn't ...
0
votes
0answers
24 views
Can EAP/PEAP protocols be re-used for wired AP authentication
If i require a java application software to connect to multiple access points (in various organization) can i re-use the current EAP protocols in access points to connect to them?
For example, today ...
5
votes
1answer
243 views
How do TV satellites authenticate the receiving signal to make sure its from the TV station that its claiming to be and is not spoofing? [duplicate]
What stops criminals from jamming a channel by sending spoofed signals to its satellite in space, acting like they are from the TV station and therefore hijack or jam the channel?
How can the ...
0
votes
1answer
36 views
wireless point-to-point security
I have a remote site where I need to bridge approx 700m distance either with fibre or wireless for a backbone internet connection.
The digging would cost a bit more and many suppliers are offering ...
0
votes
1answer
71 views
How is my employer accessing my router when employer's laptop is wirelessly connected to my home network
I have a modem bridged to a modern router running open source software and heavily secured. I have all connections to the router through a personal vpn from a dedicated provider. During work from home ...
1
vote
2answers
142 views
Can your cell phone transmissions reveal your identity?
Is it feasible for hackers sitting near you to have some sort of RF listening device that uses your phone's transmissions to identify your name or other information that could be used to determine who ...
82
votes
7answers
15k views
Company claims hardwire connections are a security issue
Someone to whom I am related is at a study camp for their desired profession. This person, let's call her Jane, is supposed to be studying rigorously for two months. The housing provided offers ...
0
votes
0answers
44 views
Capturing Arp-reply packets from all neighbouring networks
actually I want to capture all the arp-reply packets from all neighboring wireless networks, but when I try to do the same, no arp-reply packets from any networks are visible.
Let me make you the ...
0
votes
0answers
45 views
Capturing Dot11 (802.11) headers on Mac OSX
I'm trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I've heard somewhere that WLAN interface of Mac OSX (en1 interface as ...
0
votes
0answers
56 views
Wireshark showing all ports being probed from my tablet
The first two pictures: Wireshark shows a tablet device as the source and my computer as the destination and vice versa. This tablet has never been connected via USB, FTP, BT, nothing to the computer. ...
0
votes
1answer
71 views
Is it possible to make a spoofing attack in a access point with same SSID target network?
With an Evil Twin attack is it possible for the access point to send malware to connected devices? If it is, how can this be prevented?
0
votes
1answer
85 views
Finding wpa2 key length
Is it possible to determine WPA key length through a successful handshake?
Below is a screen capture showing the packet capture session of interest as displayed in Wireshark:
My question came from ...
1
vote
2answers
203 views
How can hackers do a tv signal intrusion?
How can hackers do incidents like the Max Headroom one?
This is related, but it doesn't answer my question.
5
votes
2answers
61 views
Why WPA2 Client Devices Respond to Any Deauths
A great number of attack methods for WPA2 involve getting a handshake capture. To capture one the fastest way involves sending deauthentication packets to the client forcing him to initiate the ...
4
votes
1answer
155 views
Can a bluetooth speaker contain malware?
Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
1answer
157 views
How can I check if my second hand Apple wireless keyboard contains a keylogger?
I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
1
vote
0answers
45 views
Aireplay issues
I started using the aircrack-suite and to be more specific it is about aireplay-ng. The problem ist that...
aireplay-ng -0 wlan0mon
...does work, but...
aireplay-ng -9 wlan0mon
...doesn't
In fact ...
2
votes
1answer
364 views
How vulnerable are rolling codes used in car keyfobs to simple replay attacks?
I've read this question - Vehicle remote key security, and I have a few simpler questions that are not addressed in that one.
I just received a whatsapp viral forward raising a few claims regarding ...
1
vote
0answers
38 views
Video card - pci express security
I recently bought a second hand Nvidia video card which runs in SLI mode with my default video card.
Can it be infected with a malicious program added by the previous owner,
steal data from the ...
-2
votes
2answers
86 views
How to get a thorough view of wireless router's logs?
I am trying to attack my wireless router using Kali Linux for learning purposes. When I check the wireless router's logs after a successful attack, it doesn't show me the logs related to attacks which ...
0
votes
1answer
78 views
How do Access Points manage attempted Passwords? [duplicate]
How do Access Points check whether the provided password (given by the device wishing to authenticate) is actually the correct password of the Access Point?
If a user attempts to join a secured ...
9
votes
1answer
945 views
Why is WPA3 using 192-bit encryption?
Why is WPA3 going to be using 192-bit encryption and not 256-bit in the security suite?
2
votes
0answers
91 views
Duplicate packets in packet injection
I've been trying to develop a few scripts that can forge custom 802.11 frames and inject them through a monitor mode interface. I have gone through the development documentation of radiotap headers ...
2
votes
2answers
74 views
Wireless network solution? WPA2/MAC Filtering problems
In short we have 7 Mobile Casio Scanners that seem to be incapable of holding their Wi-Fi passwords, they sometimes lose them for no apparent reason.
We of course, cannot give out the wireless ...
0
votes
0answers
72 views
Would using a 2.4 GHz wireless headset be secure to use?
Thinking about buying an Arctis 7 Wireless Headset with DTS as an everyday Desktop headset.
It only states 2.4Ghz wireless as connection type. Considering mousejacking attacks and bluetooth security, ...
2
votes
1answer
93 views
Is it possible to classify Wi-Fi Security Level without connect to Wi-Fi
Is it possible to classify Wi-Fi Security Level (such as Secure, Non-secure, etc.) without connect to Wi-Fi.
I don't know is it possible, but if not, can we still classify Wi-Fi security level when ...
0
votes
1answer
432 views
How does one go about building a system with which to Van Eck Phreak?
I've been reading plenty on the Internet about Van Eck Phreaking/TEMPEST and I'm curious as to how one might go about building a system to try it out. All I've found so far is this website. It hasn't ...
5
votes
2answers
289 views
What does a VPN NOT protect me from?
At my office we have two wireless networks - an official one, and a "Guest" one. There is extensive filtering on the official one, and using it requires a users work credentials. The Guest one is ...
6
votes
2answers
108 views
Network Access Control for Wireless Network
I am looking for suggestions to implement a group policy that gives the control to administrator of domain to allow or disallow a user whenever he/she connects to the wifi network. Is there any way i ...
9
votes
2answers
848 views
WPA3 announced. Really needed?
It seems Wi-Fi Alliance announced WPA3 for the end of 2018.
Anybody knows exactly what is new? features, security improvements, etc...
Is it because of Krack attack? I thought patching WPA2 is enough....
3
votes
1answer
245 views
How UPnP is vulnerable if the attacker is not connected in the same network?
I read a lot about UPnP vulnerability and I understand it to some extent. What I don't understand is how attacker will attack if he is not connected to the same network. I read how attacker can do ...
2
votes
0answers
203 views
Storing Wireless auth certs in a TPM
Within my organisation we're being asked to provide a secure but seamless wireless experience e.g. user logs on to Windows device and are connected automatically to corporate network via wireless. ...
-1
votes
1answer
145 views
Handshake not capturing on wpa-psk/wpa 2 psk
I'm struggling to get a handshake from my router when using airodump.
airmon-ng
airmon-ng check kill
airodump-ng wlan0mon
airodump-ng -c (channel)--bssid(adress)-w (.cap file locand name) wlan0mon
...
0
votes
2answers
113 views
Is it impossible to know if the de-authentication packet has been sent to the victim using Wireshark and mdk3? [duplicate]
I want to know if the clients get disconnected or not without checking there devices while I am outside the network. Is it impossible with WireShark?
1
vote
3answers
436 views
Restrict mobile phones to specific Access Point (WIFI Router)
Is it possible to restrict the access of android phones, iphone, and MS phones and tablets to a specific AP?
I want the corporate mobile device to only be able connect to one specific AP (the ...
50
votes
6answers
11k views
How safe are wifi enabled talking toys?
There have been ads on the radio recently for a wifi enabled toy called Talkies, which are advertised as being able to communicate with app enabled phones, with a "trusted circle" that other phones ...
0
votes
1answer
73 views
Modifying the Ethernet/Wifi driver to get faster Network access? [closed]
I've already asked this question on networkengineering.stackexchange.com, but unfortunately it was marked as Offtopic there.
As far as im concerned the CSMA/CD and the CSMA/CA standard rely on the ...
3
votes
2answers
330 views
Difference between alfa card and my laptop network card?
I'm following a CEH formation in which we have to buy an alfa card.
What's the difference between an alfa card and my laptop's network card?
I thought it was that alfa card can be set in monitor mode ...
0
votes
1answer
217 views
Is TP-LINK TD-W8151N vulnerable to KRACK?
I have a TP-LINK TD-W8151N 150Mbps Wireless N ADSL2+ Modem Router.
Is this model vulnerable to KRACK?
It is not specified in the WPA2 Security (KRACKs) Vulnerability Statement. Will TP-Link publish ...
4
votes
1answer
286 views
Will wireless isolation/AP isolation protect from KRACK?
Will using AP isolation on an Access Point protect connected clients from the KRACK vulnerability on that network?
17
votes
3answers
7k views
Is WPA2-Enterprise affected by the KRACK attack?
From my reading of the whitepaper it is the 4-way handshake that is vulnerable, but WPA2-Enterprise uses a RADIUS server for authentication, so is it also exploitable? And if so, how?
117
votes
3answers
18k views
Why wasn't the KRACK exploit discovered sooner? [closed]
From what I've read, the issue is as simple as performing step 3 of a 4-step handshake and the consequences of performing that step more than once. Considering the complexity of these kinds of ...
0
votes
0answers
563 views
Is it enough to patch the AP to protect against KRACK attacks? [duplicate]
I could not understand from the KRACK paper and site if access points are vulnerable or the attack is a client side attack?
Can patching the AP mitigate all attacks?
249
votes
5answers
28k views
Consequences of the WPA2 KRACK attack
Today new research was published on vulnerabilities in wireless network security called Krack.
What are the real-world consequences of these attacks for users and owners of wireless networks, what ...
0
votes
1answer
288 views
Zenmap: Can't get hostnames for clients just IP addresses
I have run both a quick and intense scan on my network with Zenmap and I can't get the hostnames of the clients. If I do an ARP scan I get some hostnames and if I use Fing app on my iPhone, I can see ...
4
votes
1answer
802 views
Where would I place a sniffer to capture data in a home network with the following topology?
I am aware of the various techniques that there are to sniff around a network that has Hubs or Switches (port mirroring, hubbing out, use of taps), but I am not sure which method would be more ...
0
votes
1answer
209 views
Mouse receiver shows up as keyboard too - is this an issue?
I have recently seen some wireless mice that when the receiver is plugged in to a USB port, Windows device manager shows a new "HID-compliant mouse" (as expected) and also an "HID-compliant keyboard." ...
