Questions tagged [wpa2]
Security protocol (IEEE 802.11i) developed by the Wi-Fi Alliance to protect wireless networks.
327
questions
2
votes
2
answers
6k
views
MITM over WPA2 (e.g. with ettercap)
I've read on a few sites that it's possible to conduct MITM attacks over WPA2-secured connections. So for example I could replace the content of a site a user tries to access over HTTP. Is this true? ...
0
votes
3
answers
731
views
Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?
I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet.
Also, what if the router ...
2
votes
1
answer
1k
views
What is the difference between key mechanism in wep and wpa
I haven't found the resources explaining about exact authentication mechanism about wpa-psk in the internet. finally i found securitytube videos i found one video regarding the wpa-psk concepts.in ...
- 231
13
votes
3
answers
10k
views
If WPA2-PSK is insecure, what other options do home users have?
from what I'm reading online it seems that one can land attacks and successfully crack a WPA2-PSK wifi network, is that true and if it is, how home users can secure their networks? I seen an ...
- 233
1
vote
1
answer
848
views
Scapy WPA2 packet forging
Can I use scapy to forge custom packets on WPA2 network? Can I even pack the IEEE 802.11 headers?
- 155
2
votes
2
answers
1k
views
How to forge custom IEEE 802.11 packets?
I read about 802.11 networks and found out that all the frames from client are directed to the AP. How can I forge IEEE 802.11 packets so that I can send them directly to the clients using the group ...
- 155
1
vote
1
answer
6k
views
reaver - [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null))
I am familiar with dict-password cracking but I recently moved on to reaver. When I run reaver, it pops up with an error [!] WARNING: Failed to associate with xx:xx:xx:xx:xx:xx (ESSID: (null)).
I ...
- 11
4
votes
1
answer
2k
views
Wi-Fi asks to accept (self-signed) certificate – What is it used for?
When I tried to connect to my University's Wi-Fi for the first time, it asked me to accept a (probably self-signed) certificate.
Luckily they published the fingerprint so I was sure it is safe to ...
- 1,073
1
vote
2
answers
3k
views
What would be the most efficient way of brute forcing a wifi key [duplicate]
I was wondering how can a brut force of my wifi be prevented so I want to know the best technique that can be used to brute force it first, so protection isn't my question. My question is: What brute ...
- 157
3
votes
1
answer
2k
views
Can't decrypt captured HTTP connection from WPA Network
Hi I am attempting to sniff HTTP packet traffic using Wireshark on Kali Linux. I have added my wpa-pwd correctly to the IEEE 802.11 protocol and enabled "decryption".
Currently I can only view the ...
- 33
0
votes
1
answer
7k
views
Which method of WPA2 enterprise is more secure: TTLS or PEAP [closed]
Say we have two WPA2 enterprise setups using a RADIUS server. If both implementations use MSCHAPV2 and the same credentials. Which of the two would be more secure and how are these two implementations ...
- 11
13
votes
3
answers
76k
views
What is "anonymous identity" in enterprise WPA?
When connecting to an enterprise WPA protected network, I have the option the add an "anonymous identity" (see related screenshot). I don't understand what's the point though.
Who get to see this ...
- 233
1
vote
1
answer
633
views
Role of derived keys in EAP-PSK in WPA-2
I'm currently trying to understand WPA-2 and I've discovered that it's built on the EAP-PSK protocol which sets up some keys derived from the SSID name and a password.
I assume that the keys derived ...
- 113
2
votes
2
answers
1k
views
Enabled WPS methods
I would like to know if there are tools available to identify what WPS method is actually enabled on an AP?
I would like to know also if there is a way by looking at packets to know which WPS method ...
- 577
1
vote
1
answer
159
views
Are there any pen testing tools/methods for wpa2 networks that don't require using an adapter that supports monitor mode? [closed]
I really enjoy reading and researching about networking and pentesting. Recently I heard from a friend that there are ways that can be used to get into wireless networks without needing an adapter ...
- 11
0
votes
1
answer
186
views
Set up an AP that indicates it is encrypted with WPA2 but in fact is open?
I want to create an exact duplicate of an existing access point that use WPA2 AES (CCMP) for encryption so that the clients will automatcally be connected to my AP, so I used this command:
airbase-ng ...
- 1
4
votes
2
answers
5k
views
If password is super long, your wpa / wpa2-psk is safe?
sorry im kinda clueless with this stuff...
I heard if you set your wifi password to more than 10 or so digits (and make it complicated), then your wpa / wpa2 psk would be safe. Is that true?
If not, ...
- 41
2
votes
2
answers
3k
views
WPA with PSK and with Radius Server
In case of WPA2 using the Radius server, every client gets its own username and password. But what is the case in the WPA2 using a PSK without the authenticating server. In this case also we have a 4 ...
- 125
1
vote
1
answer
413
views
Why can't I have WPA handshake on aircrack? [closed]
I know this might seems general question to be googled first and I have tried.
I have successfully de-authenticated the client or clients multiple times but I didn't get the message of WPA handshake ...
- 11
5
votes
1
answer
3k
views
Is it possible to steal WPA2 key using a rogue AP?
Without using a 'fishing' homepage explicitly asking for the user to retype the WPA key. Is it possible to catch the WPA key wich is sent to a rogue AP in the initial connection phase ?
- 315
8
votes
1
answer
36k
views
Rainbow tables/hash tables versus WPA/WPA2
In Wi-Fi penetration testing, is it possible to use rainbow tables/hash tables on WPA/WPA2 networks?
Is there an advantage of one over the other?
...
- 323
3
votes
1
answer
337
views
Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
5
votes
3
answers
8k
views
ASUS RT-AC68 login page is redirecting to some Amazonaws page?
Has my ASUS router been hacked or just glitchy?
When I tried to login to 'router.asus.com' it would redirect to "[censored just in case].us-west-2.compute.amazonaws.com/find/device.html" and it said ...
- 61
7
votes
2
answers
593
views
Does a WPA2-PSK authentication only succeed if both parties know the pre-shared key?
Normally people think of WiFi authentication as the client proving to the AP that it knows the pre-shared key. But does the AP also prove to the client that it knows the pre-shared key?
Is it ...
- 1,220
1
vote
2
answers
2k
views
Hashcat does 1-7 numeric characters on brute force attack when specifying 8
I have Hashcat 0.49 on Kali Linux 1.1.0a and I have a .hccap file. It's a WPA2 Network in the file so I chose a mask of 8 numeric characters (?d?d?d?d?d?d?d?d) and instead of starting at 8 numeric ...
- 111
2
votes
2
answers
686
views
"Sniffing" Wifi Password? [duplicate]
I wonder if the follwing is possible:
Assume you want to gain access to the AP "ap".
Isn't it possible to set up a hotspot with the same BSSID, so that clients think that you are ap and send the ...
- 33
1
vote
2
answers
446
views
How to use Aircrack-ng when knowing part of the password?
Let's say I know the password starts with "1234" and after that there is a commonly used password. I would like to use the word list I have for the second part of the password, but to include somehow ...
- 11
1
vote
2
answers
2k
views
Is WPA(2)/AES or some derivative really perfectly secure?
It is said they are uncrackable for now, but my question is how much uncrackable are they?
Of course, it requires a situation to answer this, so here comes an assumed situation(the worst possible ...
- 98
1
vote
3
answers
212
views
Which kind of Wifi is safe to use ?
I travel a lot, so I most of the time get Wifi from Hotel or Cafes.
I payed attention to the fact that some Wifi does not have security password !
Here is a screenshot of the type of security I found ...
user16672
6
votes
2
answers
10k
views
WiFi security using IEEE 802.1X - how secure is it?
My company's set-up involves a single AP (TPlink) that is configured to authenticate clients using RADIUS. All works well, but: on a regular WPA/WPA2 network, once you have the PSK, you are able to ...
- 583
5
votes
2
answers
2k
views
How is TSC (TKIP sequence counter) calculated, in WPA?
I'm reading about 802.11, from IEEE's PDF, from page 1191, and in particularly I'm reading about TKIP. To decrypt and encrypt, you use a TSC (TKIP Sequence Counter) as you can see in these images:
...
- 191
2
votes
1
answer
334
views
How can I get EAPOL packet's number?
I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth...
If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
- 191
45
votes
2
answers
2k
views
WPA2 ephemeral key derivation
I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived.
Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
- 551
0
votes
2
answers
887
views
Is it possible for hackers hack my PC by creating fake AP that my PC probed
I heard that hackers can create fake AP that my PC is probing. As soon as my PC found the Fake AP, it will connect automatically. So
To clarify, is it possible for hackers create the Fake AP that my ...
- 111
1
vote
0
answers
448
views
get a key HEX from wpa/wpa2 handshake [closed]
Can I get a key HEX from wpa/wpa2 handshake, or from the network in another way without knowing the passphrase?
Example:
Network SSID: linksys54gh WPA passphrase: radiustest
Hexadecimal key: ...
- 11
2
votes
1
answer
709
views
Why does WPA2 need a 4 way handshake?
If client and AP both have the Pairwise Master Key (PMK) available, why do we need a 4 way handshake again to derive some other key (PTK)? Why can't we use PMK for further security process?
- 21
0
votes
1
answer
331
views
WPS and WPA2 connection methods
Do clients use WPS every time when they connect to a WPS-enabled AP?
Or maybe they do it just the first time and then they switch to a normal WPA/WPA2 key exchange?
If the latter, it's possible for ...
2
votes
1
answer
3k
views
Is it possible to prevent an attacker from capturing my WI-FI handshake on WPA-2 AES?
For quite a while I've been experimentally hacking wireless routers by capturing handshakes and Decrypting them using oclHashcat on my computer. even the most complicated passwords won't take longer ...
user60980
0
votes
3
answers
307
views
Can the packets of a wireless network be sniffed by a user who is not present in that network?
1.If an user knows the frequency used by a wireless network, is he able to collect the packets from that network? Those packets may be encrypted, but can
he collect those packets?
2.If the user has ...
2
votes
2
answers
8k
views
can wpa2 wifi be hacked by capturing data on an evil twin?
If I copied the wifi essid and channel and did a de-authentication to the clients of the wifi that I want to hack and started a wifi of my own with the same essid, bssid and channel and I started ...
- 412
23
votes
6
answers
10k
views
Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?
So I'm looking into public WiFi security in places such as hotels, coffee shops etc. It seems the current standard is just to use open wi fi connections in many of these locations. I would assume this ...
- 507
43
votes
3
answers
50k
views
What is the best home wireless network encryption algorithm to use?
What is the best home wireless network encryption algorithm to use? I realize the best answer will probably change over time, and hopefully people can provide updated answers as new standards come ...
- 3,157
3
votes
1
answer
8k
views
How to use multiple charsets in hashcat
I wanted to use a brute force attack on hashcat but WPA/WPA2 networks are 8-64 characters long and they have multiple possibilities of a password. I was wondering if there was a way to use multiple ...
- 111
-1
votes
1
answer
264
views
WPA and WPA2 Help [closed]
I'm trying to hack my own WPA and WPA2 network for learning purposes.
I used A 10 characters length password with only numbers, I know if I had to create the word list file it will be Huge, So I ...
- 3
0
votes
1
answer
6k
views
Fritz!Box default WPA2 security
I was wondering, how safe the default configuration of a Fritz!Box really is.
By default, there is a 16 digit WPA2 key, which contains only numbers.
My first though was, that bruteforcing is right ...
- 213
11
votes
9
answers
94k
views
Wifi penetration testing: Why aireplay-ng de-authentication does not work?
I am trying to pentest the security of the password of my wireless network. It is a WPA2 with pre-shared-keys. My current computer is connected to the wifi router and I try to de-auth my own machine.
...
- 513
2
votes
0
answers
246
views
WPA2-Enterprise - unable to find a way around Lanner Electronics
I have currently been working in an environment where I am connected to a WPA2-Enterprise network requiring me to enter my username and password for the network whenever I connect. I have been asked ...
- 31
0
votes
1
answer
1k
views
Wifi Educational Hacking - Aircrack-ng wpa vs wpa-psk
I have a question about the max amount of dictionaries need to crack a wpa2 or wpa2-psk password
I am using aircrack-ng on ubuntu
Is there any possible way to calculate the maximum amount of ...
-4
votes
1
answer
1k
views
Is there any way to hack the password of my neighbour WPA-PSK and WEP connection [closed]
Is there any way to hack the password of my neighbour WPA-PSK and WEP connection of WI-FI without using a keylogger.
I tried a lots of softwares and efforts but unsuccessful. Can any one suggest. I ...
- 9
2
votes
2
answers
6k
views
Decoding tunnel bytes in EAP-TLS or EAP-TTLS using Wireshark
I have a few pcaps of traffic for EAP-TTLS conversation, carried by RADIUS. I also have some being carried by EAPoL, but I think the answer to that case might be even less straightforward (though ...
- 335