Questions tagged [wpa-enterprise]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
126 views

WPA2 Enterprise Authentication Certificate Security

While reading up about WPA2-Enterprise, it states that it is more preferred over WPA2-Personal as it allows authentication via digital certificates which prevents over-the-air attacks. However, I am ...
user avatar
1 vote
1 answer
106 views

Under what circumstances can WPA be cracked?

can someone please tell me under what circumstances can WPA be cracked? i'll appreciate it.
user avatar
1 vote
1 answer
605 views

How to protect against MAC spoofing in WiFi network?

I have this scenario: I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet. I tried Captive portal, but captive portal is very vulnerable against ...
user avatar
1 vote
1 answer
746 views

How does the EAP-TLS handshake work, exactly?

I'm trying to understand EAP-TLS authentication, but I'm struggling to understand a few bits: Before the supplicant sends any certificates to the server, it usually verifies the server's identity. ...
user avatar
1 vote
1 answer
253 views

How do enterprises deal with SSO and Google backing up WiFi credentials?

Single Sign On in a company means that you have one set of credentials for all the services the company uses / provides to their employees. Logically, these credentials might also be usable for Wifi. ...
user avatar
  • 205
1 vote
2 answers
462 views

Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?

I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
user avatar
  • 475
2 votes
2 answers
318 views

How can I secure Wifi against these specific attacks?

I have found myself in a situation where I need to setup a somewhat secure Wifi network. I am primarily concerned about these attacks, however I welcome any advice about other attacks that I should be ...
user avatar
  • 215
1 vote
0 answers
2k views

Need to encrypt RTSP over LAN

I tried googling everywhere, but got no help with what I needed specifically. Let's say I have several IP cameras on a local area network. This LAN will NOT be connected to the Internet. The IP ...
user avatar
2 votes
1 answer
5k views

Will WPA Enterprise give any advantage on home network with one user?

I understand some of the reasons why WPA Enterprise is more secure from this question: Why is WPA Enterprise more secure than WPA2? However, given a home network with only one single user where that ...
user avatar
  • 320
26 votes
1 answer
7k views

What is stronger - WPA2 Enterprise with 2048 bit key, or Personal with 63 character passphrase?

Which of the two following has a stronger cryptographic strength in withstanding brute-force attacks? WPA/WPA2 Enterprise using 2048-bit RSA public-key WPA/WPA2 Personal using 63-character ...
user avatar
  • 261
5 votes
2 answers
15k views

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?

Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)? If so, what are the security implications? The reason I ask is: I'm regularly connecting to a ...
user avatar
  • 1,639
1 vote
2 answers
418 views

Online banking on wpa & wpa2 enterprise

I could use two wifi connections, both with WPA & WPA2 Enterprise security, automatic PEAP and MSCHAPv2, one of them with certificate, the other without; both require user/pwd and are on a ...
user avatar
  • 359
1 vote
0 answers
76 views

Which attributes of a WPA AP certificate are used by a client device in deciding if the certificate has been trusted before?

When connecting to a new AP, the client device will pop a warning to ask if the certificate of the new AP should be trusted. If trusted, the warning doesn't show anymore if the certificate is known to ...
user avatar
0 votes
0 answers
324 views

How feasible would it be to sniff traffic between an Authentication Server and a RADIUS server in a corporate setting?

For WPA enterprise in the corporate world, is the RADIUS server connected to the Authenticator/Access Point wirelessly or 'wiredly' for most situations? If they are connected wirelessly, does this ...
user avatar
1 vote
0 answers
184 views

Is the keystream recovered by tkiptun-ng the same key used to encrypt all data frames between the client and the AP?

Looking at the manual for tkiptun-ng,(http://www.aircrack-ng.org/doku.php?id=tkiptun-ng) The output saves the keystream in the example near the end of the program. Is this the same keystream used to ...
user avatar
2 votes
2 answers
3k views

Is is possible to decrypt 802.11 for WPA enterprise?

So it is fairly trivial to decrypt 802.11 for WPA-PSK as explained in this link https://wiki.wireshark.org/HowToDecrypt802.11. Is it then possible to decrypt the same way for WPA enterprise?(Assuming ...
user avatar
0 votes
1 answer
373 views

Which key is actually used for encrypting data traffic in WPA after the 4WHS?

Some sites say that the PTK is used for encrypting the data between the client and the WAP while others say that the PMK is used instead. Which one is true? From what I understand, this can have very ...
user avatar
1 vote
0 answers
159 views

Force/Suggest the client to use one specific EAP method

I would like to suggest to the client which one EAP method and inner authentication to use. I'm using hostapd to create the AP. I've tried by removing some methods in the hostapd.eap_user but I ...
user avatar
3 votes
2 answers
192 views

Are there any exploitable protocol flaws in WPA Enterprise?

I just watched this video https://www.offensive-security.com/penetration-testing/hacking-wpa-enterprise-with-kali-linux/ and the authors readily admit that the title is click-bait but I am still ...
user avatar
0 votes
1 answer
447 views

Attacking WPA/WPA2 ; Clarification on deauthentication packets

In the attack on WPA/WPA2, one way to force a handshake is by sending deauth packets to force the client to deauntheticate. During reauthentication attempts, the handshake can the be captured. Here is ...
user avatar
  • 1,526
2 votes
1 answer
596 views

Does WPA PSK/Personal break PMK?

I am not sure about the difference between WPA-PSK TKIP and WPA-Enterprise TKIP key generation. Do they both generate same keys from PMK, but for different purposes or are they created through a ...
user avatar
  • 31
3 votes
1 answer
370 views

RADIUS for WPA2 Enterprise in Cloud?

This is about securing WiFi APs which are usually connected to broadband like DSL and Fibre. Some of them are at business site and some are at home. To protect against Evil Twin attack (basically ...
user avatar
  • 2,706
23 votes
2 answers
5k views

How is attacking WPA different from attacking WPA2?

What’s the difference between the process of attacking WPA and the process of attacking WPA2? I know that WPA2 is much more secure than WPA. However, it seems the case that both of them are attacked ...
user avatar
  • 1,526
7 votes
1 answer
394 views

How to provide user friendly WiFi access to gym members with WPA2 Enterprise?

Background A friend of mine is the owner of a medium sized gym. He wants to provide WiFi to his customers and asked me to come up with a concept and eventually also deploy it. As a computer scientist ...
user avatar
1 vote
0 answers
126 views

Substitution Table in TKIP

In TKIP Encapsulation, we divided the per packet key mixing process into two phases. In phase 1, we are taking three inputs i.e temporal key (128-bit session key), transmitter MAC address (48 bits) ...
user avatar
2 votes
2 answers
248 views

What auth info is locally revealed with eduroam WPA-Enterprise 802.1X?

If you authenticated with your eduroam credentials at a participating institution, your home institution is the one doing the authentication of the credentials, and the host institution is only ...
user avatar
  • 1,874