Questions tagged [wpa-enterprise]
The wpa-enterprise tag has no usage guidance.
27
questions
2
votes
2
answers
107
views
WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks
While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
- 51
0
votes
1
answer
209
views
WPA2 Enterprise Authentication Certificate Security
While reading up about WPA2-Enterprise, it states that it is more preferred over WPA2-Personal as it allows authentication via digital certificates which prevents over-the-air attacks.
However, I am ...
1
vote
1
answer
125
views
Under what circumstances can WPA be cracked?
can someone please tell me under what circumstances can WPA be cracked? i'll appreciate it.
- 41
1
vote
1
answer
1k
views
How to protect against MAC spoofing in WiFi network?
I have this scenario:
I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet.
I tried Captive portal, but captive portal is very vulnerable against ...
- 19
1
vote
1
answer
1k
views
How does the EAP-TLS handshake work, exactly?
I'm trying to understand EAP-TLS authentication, but I'm struggling to understand a few bits:
Before the supplicant sends any certificates to the server, it usually verifies the server's identity.
...
- 11
1
vote
1
answer
280
views
How do enterprises deal with SSO and Google backing up WiFi credentials?
Single Sign On in a company means that you have one set of credentials for all the services the company uses / provides to their employees.
Logically, these credentials might also be usable for Wifi.
...
- 205
1
vote
2
answers
606
views
Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?
I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
- 485
2
votes
2
answers
341
views
How can I secure Wifi against these specific attacks?
I have found myself in a situation where I need to setup a somewhat secure Wifi network. I am primarily concerned about these attacks, however I welcome any advice about other attacks that I should be ...
- 225
1
vote
0
answers
2k
views
Need to encrypt RTSP over LAN
I tried googling everywhere, but got no help with what I needed specifically.
Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
2
votes
1
answer
5k
views
Will WPA Enterprise give any advantage on home network with one user?
I understand some of the reasons why WPA Enterprise is more secure from this question: Why is WPA Enterprise more secure than WPA2?
However, given a home network with only one single user where that ...
- 340
26
votes
1
answer
7k
views
What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?
Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks?
WPA/WPA2 Enterprise using 2048-bit RSA public-key
WPA/WPA2 Personal using 63-character ...
- 261
6
votes
2
answers
17k
views
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)?
If so, what are the security implications?
The reason I ask is: I'm regularly connecting to a ...
- 1,719
1
vote
2
answers
455
views
Online banking on wpa & wpa2 enterprise
I could use two wifi connections, both with WPA & WPA2 Enterprise security, automatic PEAP and MSCHAPv2, one of them with certificate, the other without; both require user/pwd and are on a ...
- 369
1
vote
0
answers
76
views
Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?
When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn't show anymore if the certificate is known to ...
- 429
0
votes
0
answers
352
views
How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?
For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this ...
- 429
1
vote
0
answers
185
views
Is the keystream recovered by tkiptun-ng the same key used to encrypt all data frames between the client and the AP?
Looking at the manual for tkiptun-ng,(http://www.aircrack-ng.org/doku.php?id=tkiptun-ng) The output saves the keystream in the example near the end of the program. Is this the same keystream used to ...
- 429
2
votes
2
answers
4k
views
Is is possible to decrypt 802.11 for WPA enterprise?
So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming ...
- 429
0
votes
1
answer
444
views
Which key is actually used for encrypting data traffic in WPA after the 4WHS?
Some sites say that the PTK is used for encrypting the data between the client and the WAP while others say that the PMK is used instead. Which one is true?
From what I understand, this can have very ...
- 429
1
vote
0
answers
159
views
Force/Suggest the client to use one specific EAP method
I would like to suggest to the client which one EAP method and inner authentication to use.
I'm using hostapd to create the AP.
I've tried by removing some methods in the hostapd.eap_user but I ...
- 41
3
votes
2
answers
196
views
Are there any exploitable protocol flaws in WPA Enterprise?
I just watched this video https://www.offensive-security.com/penetration-testing/hacking-wpa-enterprise-with-kali-linux/ and the authors readily admit that the title is click-bait but I am still ...
- 667
0
votes
1
answer
521
views
Attacking WPA/WPA2 ; Clarification on deauthentication packets
In the attack on WPA/WPA2, one way to force a handshake is by sending deauth packets to force the client to deauntheticate. During reauthentication attempts, the handshake can the be captured. Here is ...
- 1,556
2
votes
1
answer
668
views
Does WPA PSK/Personal break PMK?
I am not sure about the difference between WPA-PSK TKIP and WPA-Enterprise TKIP key generation.
Do they both generate same keys from PMK, but for different purposes or are they created through a ...
- 31
3
votes
1
answer
381
views
RADIUS for WPA2 Enterprise in Cloud?
This is about securing WiFi APs which are usually connected to broadband like DSL and Fibre. Some of them are at business site and some are at home.
To protect against Evil Twin attack (basically ...
- 2,721
23
votes
2
answers
5k
views
How is attacking WPA different from attacking WPA2?
What’s the difference between the process of attacking WPA and the process of attacking WPA2?
I know that WPA2 is much more secure than WPA. However, it seems the case that both of them are attacked ...
- 1,556
8
votes
1
answer
407
views
How to provide user friendly WiFi access to gym members with WPA2 Enterprise?
Background
A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
1
vote
0
answers
131
views
Substitution Table in TKIP
In TKIP Encapsulation, we divided the per packet key mixing process into two phases.
In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
- 41
2
votes
2
answers
253
views
What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?
If you authenticated with your eduroam credentials at a participating institution, your home institution is the one doing the authentication of the credentials, and the host institution is only ...
- 1,894