Questions tagged [wireless]

Wireless security topics including 802.11, Bluetooth, and others.

Filter by
Sorted by
Tagged with
1
vote
1answer
106 views

How to speed up brute forcing of finding a WEP key from a captured file?

I have been working on decrypting a WEP .cap file using crunch. It has 1268 IVs. I am wondering: Can I get a clue from the captured file to speed the process of brute-forcing? If not, what other ways ...
18
votes
3answers
6k views

How secure is HTTP / HTTPS over 3G?

Suppose I log into a website, such as Twitter, from a 3G-enabled smartphone or similar device. How secure is this from interception? Can someone steal my password or login? What if I use HTTPS? What ...
0
votes
1answer
44 views

Capturing multicast packets in WLAN

(I had to move this from Network Engineering stack exchange where I origianlly asked this question) If a device in monitoring mode snoops on the traffic in a WLAN, can it CAPTURE and READ multicast ...
5
votes
1answer
727 views

Can a bluetooth speaker contain malware?

Can a bluetooth speaker contain malware? If someone were to find a random bluetooth speaker laying around and tries to connect with it, is there a possibility that the speaker has malware in it?
0
votes
0answers
79 views

Why doesn't the fluxion attack steal credentials when authenticating to the network?

I ask this question because i am not happy with the answer here In a normal attack such as fluxion. You send DEAUTH packets to the victim wifi. Clone their access point and host an open wifi. Let ...
1
vote
2answers
142 views

Why do evil twin attacks against WiFi use a captive portal?

I was recently the victim of an evil twin attack on my WiFi network, probably by the new upstairs neighbors. It prompted me, with a captive portal, saying there had been an update and I needed to ...
43
votes
3answers
49k views

What is the best home wireless network encryption algorithm to use?

What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
1
vote
1answer
89 views

MAC/IP address hiding

I am doing some experiments with wireless protocols on ns-3. What I want to ask is how can I hide MAC address/IP address, because I need it for my experiments? Is it possible to use encryption on ...
1
vote
2answers
312 views

How to get result from airdump-ng on Ubuntu 18.04 LTS?

Issue: when I run airodump-ng wlp3s0mon, no results appear. I recently installed all kali linux tools on Ubuntu 18.04 LTS from this git repo https://github.com/LionSec/katoolin My chipset is the ...
7
votes
4answers
987 views

Is a wireless receiver a security weak point?

I have bought the Logitech Wireless Presenter R400, and it includes a Wireless receiver that it should be plugged in to the computer in order for the remote send signals to the computer. I would like ...
3
votes
1answer
985 views

Can't decrypt captured HTTP connection from WPA Network

Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption". Currently I can only view the ...
1
vote
1answer
446 views

Creating a secure home network - Which firmware should I use and how should I configure my firewall?

I am starting to take on more and more enterprise clients while working remotely from my home office. I have a pretty secure network at the moment, but I have a lot hardware that I am not using and ...
0
votes
1answer
122 views

Router administration page is served over HTTP

My wireless router admin page does not include https option. It is always served over http. This is obviously a concern in case someone is sniffing the network and can read my password in plain text. ...
0
votes
2answers
114 views

unauthorized devices appear in windows 10 network drive SMB [closed]

Few days ago I was trying to access a shared folder via SMB on Windows File Explorer and noticed 3 strange mobile phone devices appear listed in the network drive. I never owned any of the mobile ...
3
votes
1answer
183 views

How do you prevent/guard against a wireless disassociation attack [duplicate]

Going over the security+ lectures by professor Messer here, he explains and demonstrates a wireless disassociation attack very well. But no where in the video does he explain how this type of attack ...
2
votes
1answer
647 views

MDNS activity— is this a network risk/vuln?

I am connected to a wireless network that is huge (think large organization). After opening up Wireshark and capturing pcap for about 15 minutes I am seeing lots of MDNS Standard Query traffic with ...
3
votes
1answer
299 views

How do I find a digital (non-WiFi) baby monitor with an encrypted signal?

What would I look for to see if a digital baby monitor (audio or video, but non-IP/WiFi) has an actual encrypted signal, or at least something to defend against the following threat model? As I'm not ...
6
votes
2answers
2k views

How to connect HackRF to Wireshark?

How to capture ZigBee waves using HackRF and how to analyze it through Wireshark?
2
votes
1answer
521 views

Prevention of sinkhole attacks

I have read about many approaches to launch and detect sinkhole attacks in wireless (sensor) networks. Yet I couldn't find any (good) articles to read about the prevention/avoidance of sinkhole ...
0
votes
1answer
981 views

How to actually calculate Pairwise Transient Key?

I have following information: PTK-Pairwise Transient Key: A value derived from PMK, Authenicator nonce(Anonce), Supplicant nonce(Snonce), Authenticator Address, Supplicant Address. This is used to ...
1
vote
1answer
257 views

Capturing traffic on WiFi Network using Wireshark [duplicate]

Is it possible to capture, using Wireshark, regular data sent by another machine inside my Wireless LAN?
0
votes
1answer
425 views

Detect / Prove and Prevent Wifi Deauth attack

I'm suspecting that my neighbor is running multiple Wifi deauth flood attacks against my Wifi. I'm using WPA2 and I don't think he can really crack my password, but my devices keep having wifi ...
2
votes
1answer
115 views

Are there any known exploits against bluetooth mice or keyboards?

Most wireless mice are not bluetooth. There are known exploits that take over wireless mice and use them as a keyboard. Are there known exploits that can remotely inject malware directly over ...
1
vote
1answer
65 views

Where does last 4 bytes of hmac go in wpa2 mic?

The wpa2 mic is a 16 bytes array which is built by Hmac(sha1) ,But the Hmac(sha1) returns 20 bytes array. So where does that 4 bytes go?
4
votes
3answers
27k views

How to stay anonymous in public wireless network?

If we are accessing a public wifi network, does changing mac address at certain intervals of time keep us anonymous forever? Is there anything other than mac address to identify a user in an AP?
1
vote
2answers
1k views

Airodump-ng : why are BSSID not associated?

Using airodump-ng with my wireless adapter in monitor mode, I am able to get expected scan to run. I have a few questions : Why do BSSIDs show as "not associated" (note: not all of them show as ...
0
votes
0answers
39 views

Can an IDS be used for detecting frames (not packets) from an non-authenticated station

Can an IDS, like snort, be used to detect Layer 2 network frames from a system i.e a system is trying to send a frame to the AP and whether Snort can work on the frame based on the rules?
1
vote
2answers
93 views

Is there any methodology to detect smart deauthentication attack?

I'm a project student in IIT-Hyderabad. I have been working in Wifi security domain for my M.Tech. In particular, I chose de-authentication attack. Whenever I sent De-Auth frames continuously to APs ...
21
votes
3answers
49k views

How is 4G LTE encrypted?

After a few quick searches for 3G security I was able to learn that this standard uses the KASUMI block cipher, of which several weaknesses have been identified (although apparently none of practical ...
0
votes
1answer
1k views

How does one go about building a system with which to Van Eck Phreak?

I've been reading plenty on the Internet about Van Eck Phreaking/TEMPEST and I'm curious as to how one might go about building a system to try it out. All I've found so far is this website. It hasn't ...
18
votes
4answers
36k views

Is UPnP still insecure?

In today's world, on equipment that is properly updated to the latest software/firmware, is UPnP still insecure, or have its vulnerabilities been fixed?
8
votes
1answer
309 views

How do rolling code fobs and receivers synchronise?

This is a follow-up question to my earlier one: Does pressing a car remote many times offer denial of service attack for rolling codes? I want to emphasize that I am asking this question more to ...
3
votes
1answer
103 views

What are the countermeasures against key cloning?

I’ve looked into the techniques of cloning the 315Mhz and 433Mhz remote car keys and I’m wondering what’s the countermeasure one can provide against wireless radio key lock? Since the radio signals do ...
0
votes
1answer
2k views

Not receiving beacons for airodump-ng to work

I have an AP close enough to me with high signal strength but for some reason I'm not receiving beacons from it. Since I don't have beacons coming in, I cannot perform deauth as well. One thing I'm ...
148
votes
3answers
17k views

Does pressing a car remote many times offer denial of service attack for rolling codes?

My understanding of remote car key fobs, and similar security devices with rolling codes, is that the key device is a transmitter that, each time the button is pressed, sends the next secret in a ...
2
votes
1answer
126 views

How does wireless keyboards' encryption prevent frequency analysis?

I've found very little information on this topic after much googling. The only partial answer I found was by Microsoft: Microsoft_AES_Technical_Factsheet By adding random data to each message, each ...
0
votes
4answers
185 views

Does improving password complexity improve the security of wireless networks?

Does having a complex preshared key improve the security of WPA2-PSK, or is having even a simple PSK enough to secure the wireless network?
2
votes
0answers
60 views

How to identify the communication protocol used in a wireless device?

I really hope that this is the right place to ask. I need to analyze a baby monitor for any security or privacy weaknesses. The spec sheet of the baby monitor says, that it uses the ISM 2400~2483.5 ...
1
vote
1answer
88 views

Is it possible to eavesdrop the wireless data transmission without being authorized to a router?

I read in computer security book that there are three places in wireless networking where you can be attacked: wireless transmission, access points and wireless network itself. The book illustrates ...
11
votes
2answers
842 views

How does MDK3 carry out deauth attacks?

With aireplay, you have to specify both the AP and client to send deauth frames to, but MDK3 doesn't require an AP mac address. Does it just scan the desired channel for beacons until it finds an AP ...
-1
votes
1answer
94 views

What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?

If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
1
vote
2answers
521 views

Prevent Text Spoofing - Best methods

In an enterprise environment we have been inundated with spoof texts appearing to be from the corporate office. After much research it appears Verizon isn't able to assist. Just wondering if anyone ...
2
votes
0answers
74 views

Why do car key remotes not use E2EE?

Background I read an article about how car keys that remotely open one's car are not secure. This answer also talks about different encryption methods being insecure. The article mentions that ...
0
votes
0answers
68 views

Kismet Ethernet MAC Address Showing Up

I have a Rasberry Pi running Kismet set to hop to different channels. I keep finding that, even after reconfiguring my settings to disallow local network access through wireless that an Ethernet ...
0
votes
1answer
513 views

4G Pocket WiFi - IMSI Catcher?

Nearly all mobile phones are vulnerable to IMSI catcher attack's fake mobile networks. They can access storage, inject rootkits/backdoors, turn the microphone on view internet traffic even with a VPN ...
-2
votes
1answer
62 views

Which brand of USB key storage and external USB storage can prevent wave or wireless read? [closed]

Which brand of USB key storage and external USB storage can prevent wave or wireless read? I find some has military encryption USB key storage , but do I need to encrypt files before saved in these? ...
2
votes
2answers
76 views

My AP is probing other device?

I just installed kismet 2018 Beta update on my kali and test run it on my host but i came across something that i dont understand and i would appreciate if someone would explain to me. When i check ...
1
vote
1answer
469 views

ARP request replay attack - why do APs work the way they do?

ARP request replay attacks are based on the practice that wireless access points repeat ARP packets injected into the network, and since these ARP packets are encrypted, they also carry the IV with it....
4
votes
2answers
19k views

ARP poisoning between a wired and wireless network

How can a ARP-Poisoning attack work in a mixed (wireless and wired) network? Assuming that the attacker is connected to the network via wireless connection and the target is a computer connected to ...
2
votes
4answers
7k views

Can anyone tell if a wireless router is plugged into an Ethernet port (without actually seeing it)

In a large network if there is an Ethernet port in the wall, is it possible to tell if a switch or wireless adapter is plugged into it? (I'm talking about the cheap home routers - with the built in ...