Hot answers tagged


Your point 2 is a bit inaccurate. The PTK is never sent over the air in WPA; it is computed from the PMK, an AP nonce, a client nonce, the AP MAC address, and the client MAC address (this is "key exchange", but the PTK never gets transmitted). Without the PMK, an attacker who sniffs the data can't discover the PTK without doing a brute-force attack (...


Sure this is possible. There's a couple of ways to approach it. The easiest way is to run kismet then as you're running it look for your Rogue access point appearing on the list of access points seen. When it does, lock the channel that kismet is looking on to the channel being used by your rogue access point (this gives a clearer signal than if kismet is ...


WEP uses RC-4 for encryption, so by saying their encryption is AES means it has to be WPA2, not WEP or WPA. Almost all vendors offer WEP as an option in order to support legacy devices though, so that's not really an indicator. The fact that SSIDer showed it as WEP windows asked for a WEP key indicates it is simply a WEP-enabled access point.


ParrotOS being a security distro includes this IDS as part of the package parrot-tools. Learn more about how the logging can be configured here. Those log files are a type of sqlite file. They are not encrypted but binary files. You can access their content using sqlite, an sqlite browser, or Kismet itself by using kismetdb_statistics. Please refer to ...


In the absence of a technical answer about Kismet, I think your best bet is to run a packet capture. Although your ethernet devices might not broadcast, your network may be configured as an unswitched zone and every node can see every other node's traffic. If you can see all that traffic on WiFi, then your answer isn't about Kismet at all, but about your ...


There really isn't a command for this. Your best bet is to script a scan every few minutes, or find an app which functions more like a spectrum analyzer.

Only top voted, non community-wiki answers of a minimum length are eligible