Wireless security topics including 802.11, Bluetooth, and others.
1
vote
0answers
22 views
Nexus 7: Can I set its WiFi to monitor/promiscous mode? If so, how? [migrated]
Related question: Nexus 7 (Or any other good android tablets) For pen testing
Also asked on: the android forums (no success so far): Nexus 7: Can I set its WiFi to monitor/promiscous mode? If so, ...
9
votes
1answer
656 views
Are networks using EAP-TLS affected by Heartbleed?
Does the Heartbleed bug affect WiFi networks secured by WPA2-EAP in TLS mode? Since it's using TLS to secure connections between the server and clients, is it possible to attack the server using the ...
0
votes
1answer
83 views
Why are cryptographic algorithms implemented in the data-link layer in wireless networks?
Could someone please tell me why cryptographic algorithms are placed in the data-link layer for wireless networks?
-1
votes
1answer
42 views
If there is no handshake, then it is worthless to check for passwords?
# aircrack-ng output-01.cap
Opening output-01.cap
Read 31484 packets.
# BSSID ESSID Encryption
1 00:11:22:33:44:55 SSIDHERE WPA (0 ...
-2
votes
0answers
20 views
How to check for 4way handshake in ivs files? [migrated]
There are many tutorials how to search in pcap files for the 4way handshake in wireshark (search for the "eapol").
Q: But how can I search for these in .ivs files? Or ivs files doesn't contain ...
1
vote
0answers
46 views
Does WPA2 Enterprise also authenticate clients to the 802.1X protected switch port?
In an 802.1X protected LAN, the switch port is usually set to "Multiple Hosts" mode and the access point is configured as an 802.1X supplicant which authenticates to the switch and "opens" the port. ...
11
votes
2answers
1k views
Why does Evil twin works?
https://en.wikipedia.org/wiki/Evil_twin_%28wireless_networks%29
My question: it's OK that someone can make an AP with the same MAC and SSID as the original AP. And with stronger signal. But what I ...
1
vote
1answer
379 views
Router detecting port scan and ack flood attack
Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
4
votes
2answers
97 views
Should I set different passwords for different Wi-Fi bands?
My new router supports both the 2.4 and the 5 Ghz bands, and it obviously allows me to set a different password for each of them.
Now, since cracking just one of the two means that the attacker would ...
1
vote
2answers
43 views
Criteria for an ADSL wireless modem
I'm going to buy a new ADSL wireless modem, and what really matters to me is security.
So, what are the criteria I should consider, and which security features should I look for?
How should I compare ...
1
vote
1answer
121 views
Why is monitor mode necessary on the NIC used to attack WPS with reaver and other tools?
I am trying to get a deeper understanding about the inner working of WiFi Protected Setup and its active attack using reaver, bully and other utilities.
What I am really unable to realize is why it ...
1
vote
0answers
86 views
802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)
So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
2
votes
1answer
115 views
Does Windows 7 have built in wifi deauthentication attack protection?
I'm testing a wifi de-authentication attack and it looks like my Windows 7 client is not getting kicked off the network during the deauthentication. Any explanations as to why that might be?
I've got ...
1
vote
0answers
110 views
Whole system ACK flood attack making internet slow
Over the past few days, I'm noticing that the log of my wireless router is showing an ACK flood attack from various IP addresses. I use a D-Link DIR-600L. I've searched through the internet, also ...
0
votes
3answers
85 views
Do i need to have Airpcap?
Hi I am learning system security in an online course, in a practical experiment I tried to monitor the traffic through my router using wireshark1.10.3 but i have a feeling that it only sensing traffic ...
1
vote
1answer
76 views
Locate rogue wireless access point using Kismet data
Is there any way how to use Kismet data to locate rogue wireless access points?
2
votes
2answers
116 views
Wireless Positioning System (WPS) works without Internet?
As I understood it (correct me if mistaken); Wifi Positioning System has a network of routers of some sort, and when I plug in my new device, by using existing devices whose locations are known, they ...
1
vote
1answer
80 views
Wireless Security Pen testing Setup
I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
0
votes
1answer
107 views
Security of Moblie Hotspot (4G LTE, WiFi) vs. Apartment Complex Cable Internet
The overwhelming majority of my banking is done online. As such, I try to be as cautious as possible. I am moving into a new apartment in a few months which offers internet. (I am not sure whether it ...
2
votes
2answers
93 views
Are there any known attacks for a laptop with the wifi connection turned off?
I recently got a new laptop. As I usually do, I removed the wifi module from it, since I intend to use it in public places such as my college and I don't need any sort of connectivity outside my home. ...
1
vote
3answers
132 views
Protecting wireless network
My wireless network protected under WPA-PSK/WPA2-PSK protocol.
Is there a good reason to change the default user/password for the router management interface?
What would it take for an hacker to ...
1
vote
1answer
46 views
How to configure Kismet to redetect same BSSIDs in a loop?
So I am working on a tool to detect any wifi device using Kismet.
When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
1
vote
0answers
38 views
Scapy capturing Dot11 headers windows
Is it at all possible to capture Dot11 headers under Scapy in Windows? I'm thinking Winpcap, but I'm not sure how I'm supposed to do that. Any clues?
1
vote
2answers
649 views
Getting access to MAC address of access point from a device wired to the network
My home network consists of a router (with wired and wireless connections), and a separate access point used to repeat the router wireless signal.
A device is further wired to the access point; it ...
2
votes
0answers
47 views
What are the security implications of pairwise master key caching in Wireless Networks?
I'm currently investigating WPA2 enterprise security options, and I'm curious about PMK Caching. I've found lots of vendor information about it, and understand that the client does not need to ...
1
vote
5answers
178 views
“Safe” public WiFi [duplicate]
Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7):
I have file sharing turned off (in "advanced ...
2
votes
0answers
104 views
Verizon wireless router is pinging my web server - is this ok or bad? [closed]
So I'm working from a local cafe, doing some web development, and need to see something in my Apache's access log. And to my surprise, in the log I see, every 30 seconds or so, a request for my root ...
3
votes
2answers
492 views
How do I securely separate a wireless subnet from the wired network?
My setup looks like this:
In the interest of security, I'd like to separate the wired network (where the Workstation is plugged in) from the wireless subnet. I don't trust some of the devices in ...
3
votes
4answers
437 views
How to stay anonymous in public wireless network?
If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
0
votes
1answer
90 views
Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)
It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to.
Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
1answer
47 views
Is MS-CHAPv2 incompatible with securely stored passwords?
I have a directory service that can speak a number of protocols and is used for user authentication. Currently user credentials are stored using Bcrypt to protect them in case of a compromised ...
1
vote
1answer
452 views
WPA 4 way handshake and authentication
I'm studying how WPA-TKIP works. As I understand, there are two parts to authentication.
Using EAP messages the client authenticates itself to the access point or authorization/RADIUS server. I ...
0
votes
2answers
259 views
Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?
Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?
I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
2
votes
2answers
170 views
Can WiMAX track its users' geo position?
We all know that if you carry a GSM terminal with you, its location is being tracked and stored in operators' databases without any need of cooperation from the terminal itself.
Is tracking user's ...
1
vote
2answers
100 views
Antivirus / Wireless PCI v2 Controls Scope
Do the Antivirus / Wireless controls within PCI v2 apply for the entire organisation, or just for the PCI scope?
2
votes
1answer
153 views
Kismet Output Shows 3 Possible Encryption Options, Which one?
Ran into an interesting situation with Kismet and Airmon-ng while observing a client wireless network.
Basically, I'm observing the network using airmon-ng, and I have my BSSID and frequency set to ...
3
votes
1answer
188 views
Strange packets coming over wireless, looking for clues
While running airodump-ng in town, I have noticed an unusual type of AP or pseudo-AP. There is a steady stream of wireless beacon frames coming in on channel 6. The frames are valid, but have several ...
2
votes
0answers
229 views
Where does the WPS Pin fit into the 4-way-handshake?
So I found a diagram online, that shows the 4-way-handshake:
The way I understand it, when a station (STA) is trying to authenticate to an access point (AP), the AP sends the ANonce (authentication ...
1
vote
2answers
805 views
Is it practically possible to spoof a WLAN access point?
I want to try something out, but I wanted to see other opinions from you guys.
What I have:
WLAN Access point, with WPA2, ESSID: testing. Home router, I can change the configuration and everything ...
0
votes
3answers
139 views
Trace wireless connections in airplane mode
I was wondering if turning on Airplane Mode really disables all wireless connections.
If so, anything you do on the phone locally can not be traced, seen, or viewed, hacked, etc. by anyone over a ...
1
vote
1answer
275 views
Is it possible to spoof the mac address of a wireless adapter so that windows sees the spoofed mac as the physical?
I know that its possible to spoof a mac address out to a network. But is it possible to spoof the address, so that the Windows operating system and applications running on Windows see a spoofed ...
7
votes
4answers
479 views
Password-less network in skyscraper office
If a company has offices way up in a skyscraper, is it acceptable to have an open network without a password, as an easy-to-use courtesy to visiting guests?
The only ones that possibly would be able ...
19
votes
1answer
805 views
Vehicle remote key security
How secure are car remote keys? When you lock or unlock your car, can someone spoof or make another remote key?
How do car remote keys work? Do they use some kind of private/public keys, encryption?
...
4
votes
1answer
532 views
Hotspot with same SSID, how does authorization work?
My university has a wireless network I log into with my username and password. It's using PEAP. My phone and laptop automatically connect to this SSID when they detect the network.
If someone sets up ...
0
votes
3answers
614 views
Reaver returns different WPS PSK and AP SSID each time it finds correct PIN
I am testing a router for vulnerability, and I've noticed an interesting anomaly. It isn't the first time I noticed it, either. When entering the right PIN, Reaver will return with a different PSK and ...
-4
votes
2answers
203 views
What kind of Wi-Fi security protocol does not use encryption?
I need to sniff HTTP packet over the WiFi network. What kind of WiFi security protocol does not use encryption? I mean if I capture the WiFi packets, no effort required to decrypt wireless packets and ...
0
votes
3answers
133 views
Can a computer's contents be downloaded wirelessly?
So my calculus teacher, who also teaches computer science, claims that a computer's entire filesystem can be downloaded wirelessly by anyone on the same network?
As a Ruby on Rails professional, ...
1
vote
2answers
1k views
ARP poisoning between a wired and wireless network
How can a ARP-Poisoning attack work in a mixed (wireless and wired) network?
Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
0
votes
2answers
61 views
Can I communicate with a wireless device, without logging in the same LAN?
Suppose there are three devices:
WPA2 protected AP
linux laptop, accessing internet through tha AP
linux laptop, not connected to the AP
I own the third device and do not know the AP's password. I ...
0
votes
1answer
154 views
How do I map all active wireless devices inbound?
In any residential building, there is a multitude of WPA2-protected wireless access points.
Yesterday I was at a friend's and attempted to launch aircrack-ng against their AP (with permission). I ...
