Collaborate Disseminate
i’m currently running a 802.11n adapter in monitor mode on a kali linux PC. Monitor mode was enabled using airmon-ng. On the same network as the kali linux PC are 2 raspberry pi devices.
Pinging from a Raspberry Pi device to the PC shows … Continue reading Monitor mode not sniffing from other devices on the same network
I’m currently trying to see if it’s possible to sniff MQTT packets between two raspberry pi’s from a wireless adapter in monitor mode attached to my PC.
I ran the following command on my PC (Kali Linux):
sudo airmon-ng star… Continue reading Packets shown are mostly 802.11 despite open network
I know .1x is the protocol that actually does the job, does RADIUS have to be involved in this process, .1x only works with RADIUS (AKA NPS on server-side Windows)?
I know .1x is the protocol that actually does the job, does radius have to be involved in this process, .1x is only work with radius(AKA NPS on a server side windows)?
I am testing the vulnerabilities of the 802.1x protocol, applied on wired network.
Does anyone know how to forge EAP-Logoff frames and spam them to a particular host?
thanks for the help
Continue reading 802.1x :how to forge and inject EAP- Logoff frames?
I have a Supplicant running on 1 Linux box attached with a Free radius server on other linux box with cisco catalyst switch (with 802.1x Port based access) in between. Now I have been able to successfully complete the authent… Continue reading How DHCP client can determine that 802.1x Port based authentication has been completed and its time to trigger DHCP discover
I was looking at a sample PCAP from 1 of configured CISCO catalyst switch configured for EAP-TLS authentication. In few snippets there were 2 EAP request and EAP response followed by EAP failure transmitted from Authenticatio… Continue reading In which Scenarios an Authentication can itself trigger EAP Failure message
If a client(supplicant) configure to perform EAP-TLS authentication connects with a switch which doesn’t requires authentication.
How can supplicant determine that authentication is not required and go ahead without authent… Continue reading How WPA supplicant can determine whether switch supports authentication or not?
I’m trying to obtain remote signal strength indication (RSSI) from received packets by sniffing the ones having Dot11 headers. But I’ve heard somewhere that WLAN interface of Mac OSX (en1 interface as default) can’t access th… Continue reading Capturing Dot11 (802.11) headers on Mac OSX
I am currently working on a python script to crack WPA2. From this SO question:
How exactly does 4-way handshake cracking work?
I’ve all of the necessary fields as described, i.e. Addresses, NONCES, PSK, and ESSID. What i … Continue reading What is EAPOL payload in WPA2 Cracking?