Questions tagged [wpa-enterprise]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
66 views

What is a logical threshold in terms of users or devices to migrate from WPA personal to WPA enterprise?

I have a question in particular about WPA's Enterprise versus Personal without discussing the specifics of WPA2/WPA3. I've encountered quite a few situations where the Personal version of WPA2/WPA3 ...
Bob Ortiz's user avatar
  • 6,635
2 votes
2 answers
542 views

WPA(2/3)-PSK-compatible per-device Wi-Fi passwords to prevent AP MITM on IoT networks

While WPA2-PSK and WPA3-SAE are really secure once a connection has been established, my understanding is that if you have access to the Wi-Fi password you can impersonate the AP without any problems. ...
Facundo's user avatar
  • 61
0 votes
1 answer
297 views

WPA2 Enterprise Authentication Certificate Security

While reading up about WPA2-Enterprise, it states that it is more preferred over WPA2-Personal as it allows authentication via digital certificates which prevents over-the-air attacks. However, I am ...
new-to-networking's user avatar
1 vote
1 answer
179 views

Under what circumstances can WPA be cracked?

can someone please tell me under what circumstances can WPA be cracked? i'll appreciate it.
Yilin LIU's user avatar
1 vote
1 answer
2k views

How to protect against MAC spoofing in WiFi network?

I have this scenario: I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet. I tried Captive portal, but captive portal is very vulnerable against ...
Amir Sabeghi's user avatar
1 vote
1 answer
2k views

How does the EAP-TLS handshake work, exactly?

I'm trying to understand EAP-TLS authentication, but I'm struggling to understand a few bits: Before the supplicant sends any certificates to the server, it usually verifies the server's identity. ...
soundlarp's user avatar
1 vote
1 answer
324 views

How do enterprises deal with SSO and Google backing up WiFi credentials?

Single Sign On in a company means that you have one set of credentials for all the services the company uses / provides to their employees. Logically, these credentials might also be usable for Wifi. ...
PhilLab's user avatar
  • 205
1 vote
2 answers
840 views

Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?

I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
Anderson's user avatar
  • 495
2 votes
2 answers
427 views

How can I secure Wifi against these specific attacks?

I have found myself in a situation where I need to setup a somewhat secure Wifi network. I am primarily concerned about these attacks, however I welcome any advice about other attacks that I should be ...
john01dav's user avatar
  • 225
1 vote
0 answers
2k views

Need to encrypt RTSP over LAN

I tried googling everywhere, but got no help with what I needed specifically. Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
Mohamad Michael Azzo's user avatar
2 votes
1 answer
6k views

Will WPA Enterprise give any advantage on home network with one user?

I understand some of the reasons why WPA Enterprise is more secure from this question: Why is WPA Enterprise more secure than WPA2? However, given a home network with only one single user where that ...
MountainX's user avatar
  • 340
26 votes
1 answer
8k views

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks? WPA/WPA2 Enterprise using 2048-bit RSA public-key WPA/WPA2 Personal using 63-character ...
ARRE's user avatar
  • 261
6 votes
2 answers
19k views

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)? If so, what are the security implications? The reason I ask is: I'm regularly connecting to a ...
voices's user avatar
  • 1,769
1 vote
2 answers
502 views

Online banking on wpa & wpa2 enterprise

I could use two wifi connections, both with WPA & WPA2 Enterprise security, automatic PEAP and MSCHAPv2, one of them with certificate, the other without; both require user/pwd and are on a ...
jj_p's user avatar
  • 359
1 vote
0 answers
89 views

Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?

When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn't show anymore if the certificate is known to ...
Lew Wei Hao's user avatar
0 votes
0 answers
400 views

How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?

For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this ...
Lew Wei Hao's user avatar
1 vote
0 answers
203 views

Is the keystream recovered by tkiptun-ng the same key used to encrypt all data frames between the client and the AP?

Looking at the manual for tkiptun-ng,(http://www.aircrack-ng.org/doku.php?id=tkiptun-ng) The output saves the keystream in the example near the end of the program. Is this the same keystream used to ...
Lew Wei Hao's user avatar
2 votes
2 answers
4k views

Is is possible to decrypt 802.11 for WPA enterprise?

So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming ...
Lew Wei Hao's user avatar
0 votes
1 answer
583 views

Which key is actually used for encrypting data traffic in WPA after the 4WHS?

Some sites say that the PTK is used for encrypting the data between the client and the WAP while others say that the PMK is used instead. Which one is true? From what I understand, this can have very ...
Lew Wei Hao's user avatar
1 vote
0 answers
180 views

Force/Suggest the client to use one specific EAP method

I would like to suggest to the client which one EAP method and inner authentication to use. I'm using hostapd to create the AP. I've tried by removing some methods in the hostapd.eap_user but I ...
JohnLocke's user avatar
3 votes
2 answers
213 views

Are there any exploitable protocol flaws in WPA Enterprise?

I just watched this video https://www.offensive-security.com/penetration-testing/hacking-wpa-enterprise-with-kali-linux/ and the authors readily admit that the title is click-bait but I am still ...
Corporal Touchy's user avatar
0 votes
1 answer
774 views

Attacking WPA/WPA2 ; Clarification on deauthentication packets

In the attack on WPA/WPA2, one way to force a handshake is by sending deauth packets to force the client to deauntheticate. During reauthentication attempts, the handshake can the be captured. Here is ...
Minaj's user avatar
  • 1,576
2 votes
1 answer
716 views

Does WPA PSK/Personal break PMK?

I am not sure about the difference between WPA-PSK TKIP and WPA-Enterprise TKIP key generation. Do they both generate same keys from PMK, but for different purposes or are they created through a ...
Heyro's user avatar
  • 31
3 votes
1 answer
404 views

RADIUS for WPA2 Enterprise in Cloud?

This is about securing WiFi APs which are usually connected to broadband like DSL and Fibre. Some of them are at business site and some are at home. To protect against Evil Twin attack (basically ...
Aria's user avatar
  • 2,731
23 votes
2 answers
5k views

How is attacking WPA different from attacking WPA2?

What’s the difference between the process of attacking WPA and the process of attacking WPA2? I know that WPA2 is much more secure than WPA. However, it seems the case that both of them are attacked ...
Minaj's user avatar
  • 1,576
8 votes
1 answer
435 views

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

Background A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
Alexander Theißen's user avatar
1 vote
0 answers
152 views

Substitution Table in TKIP

In TKIP Encapsulation, we divided the per packet key mixing process into two phases. In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
Pankaj Kumar's user avatar
2 votes
2 answers
290 views

What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?

If you authenticated with your eduroam credentials at a participating institution, your home institution is the one doing the authentication of the credentials, and the host institution is only ...
cnst's user avatar
  • 1,954