Collaborate Disseminate
I tried replicating the Karma attack and it does not work on my iphone5s and galaxy s6. Even when the phones send out directed probe requests and the Rouge AP responds with the appropriate probe responses, the phones just ign… Continue reading Is the Karma attack still relevant today?
Some sites say that the PTK is used for encrypting the data between the client and the WAP while others say that the PMK is used instead. Which one is true?
From what I understand, this can have very different security impli… Continue reading Which key is actually used for encrypting data traffic in WPA after the 4WHS?
I’m trying to brute-force my own WiFi, and from my own research, I know that all default passwords for this specific model of router I’m trying to hack follow the following rules:
password length = 8
The character set [a-zA… Continue reading How do I bruteforce a WPA2 password given the following conditions?
I’m trying to brute-force my own WiFi, and from my own research, I know that all default passwords for this specific model of router I’m trying to hack follow the following rules:
password length = 8
The character set [a-zA… Continue reading How do I bruteforce a WPA2 password given the following conditions?
I’d like to prove to a friend of mine that his wifi is insecure and learn something about password cracking on the way. The guy I am talking about does not believe in strong passwords but in SSID hiding and mac address filtering. As you kn… Continue reading Attack WPA password with hashcat – Settings and resources for "german" passwords?
Would clients (iPhone, android, whatever) roam seamlessly from an AP using WPA-PSK to an AP using WPA-EAP-PSK (with PEAP passthrough setup) if the same PSK was used and valid on both APs (AP1 and AP2 radius)?
Further elabora… Continue reading WPA PSK to WPA EAP PSK roaming
WPA 2 can be cracked using Aircrack-ng in Kali Linux. Is there any other security protocol for Wi-Fi which is not compromised?
In my home I have a router protected with WPA2-PSK (WPA2 Personal), using the passphrase.
When I try to log in to a page over the Internet (this page does not use HTTPS to log me in), all my data is sent in clear text (since I can see the… Continue reading Why is HTTP data sent in clear text over password-protected Wifi?
How can I get the PSK hash in plain text from a airodumnp-ng .cap file ?
Example :
Hash :
af8cfcf3c66d6e279d3fcb43e78569e872446e24f5f190350637fa174d9ece63
I understand aircrack-ng -J file.hccap file2.cap generates the .hccap ( fo… Continue reading Extract WPA PSK from airodump-ng output file
When I created an evil twin AP with an SSID of someone else’s Wi-Fi network e.g. MyWifiNet, I could see two APs on my phone/laptop with the SSID MyWiFiNet, however the legitimate one was secured with WPA2 and the evil one was unsecured.
C… Continue reading Evil twin access point with WPA/WPA2 [duplicate]