Collaborate Disseminate
It is common knowledge that connecting to open public WIFI networks can pose a security risk (e.g. to man-in-the-middle attacks). However, I have come across ‘open’ WIFI networks that require no password to connect to but do require a user… Continue reading Is WIFI that is ‘open’ but requires a password to access the internet safe?
Captive Portal is installed on the top of the Free WiFi AP, no password required to connect.
It was a non-standard (for me) one because it using some kind of proxying (nmap shows ‘squid’, but I’m not sure), and probably some other technolo… Continue reading Captive Portal’s proxy [closed]
so while using fluxion, something strange (maybe not) happened,i’ve captured the handshake and try to penetrate the same wifi with a captive portal attack, fluxion created a duplicate wifi ,that’s supposedly to be the trap, waiting waiting… Continue reading cannot connect to wifi in the captive portal stage in fluxion?
Recently, I connected my Android device to an open wi-fi network. Then a web page opened up asking me to choose username and password to log in with. Now when I connect the same device to that network, the web page doesn’t open up anymore … Continue reading Unregister your device from a WiFi network
I have this scenario:
I want to create a WiFi network for a hotel that the customers should pay to gain access to the internet.
I tried Captive portal, but captive portal is very vulnerable against MAC spoofing.
So I tried wpa2-enterpris… Continue reading How to protect against MAC spoofing in WiFi network?
while trying evil twin and monitoring the traffic log on my phone using http canary app … i noticed on the second the phone connects to the evil ap network .. facebook messenger requests the page .. while other apps requests normal pages… Continue reading is there a reason for FB messenger to request the captive portal page (evil twin testing)?
I’ve been looking into captive portal WiFi implementations and on a few I’be been able to easily bypass their login with the following steps:
1) Open Wireshark and run a report getting the most used IPs in my
network (except the router’s… Continue reading What is the best form of authorization for captive portal WiFi
These are the choices when looking for (not only) a RADIUS network authentication – IronWifi, clearpass, cloudess, foxpass, jumpcloud
Any others you guys know about? And in case you’ve got any experience with the services a… Continue reading Radius & Network Authentication – what service to choose?
I was recently the victim of an evil twin attack on my WiFi network, probably by the new upstairs neighbors. It prompted me, with a captive portal, saying there had been an update and I needed to enter my WiFi password to fin… Continue reading Why do evil twin attacks against WiFi use a captive portal?
Context: I have a laptop supplied by my organisation. I am trying to connect to eduroam, but I cannot do it using my organisation’s laptop. When I use a personal computer, it asks me for a username and password, just as a sta… Continue reading How is no password more secure than username+password?