wifi-security - tbhaxor's Blog

wifi-security

A collection of 24 posts

Difference between WPA and WPA2

Difference between WPA and WPA2

You will learn the differences between WPA and WPA2 encryption, including why hardware updates were necessary for WPA2, and the differences in the final MPDU of both encryptions.

Robust Security Network and Extended Authentication Protocol in Detail

Robust Security Network and Extended Authentication Protocol in Detail

Learn about the Robust Security Network, its features, and the use of the 802.11X Extended Authentication Protocol. Understand how the 4 way handshake generates dynamic keys for each network device.

WEP Encryption and Its Vulnerability in Detail

WEP Encryption and Its Vulnerability in Detail

Learn about WEP encryption and its vulnerability that made it obsolete.

Wi-Fi Legacy Security Mechanisms

Wi-Fi Legacy Security Mechanisms

In this post, you will learn about legacy wireless network security methods that are now considered obsolete but are still in use in some places.

Understand MAC Header Format in Detail

Understand MAC Header Format in Detail

This post will go over the MAC header format for the 802.11 standard and its components in depth.

Frequency Bands in Wi-Fi Networks

Frequency Bands in Wi-Fi Networks

In this post, you will learn the fundamentals of WiFi frequency bands and how different channels are regulated by government bodies to prevent interference.

Introduction to Wireless Networking

Introduction to Wireless Networking

In this post, you will learn about the need for wireless networks and the organisations behind the market penetration of this technology, as well as why this field fascinates me.

Evil Twin with Karma Attack in Enterprise WiFi Network

Evil Twin with Karma Attack in Enterprise WiFi Network

This tutorial will explain what a karma attack is and how to set up eaphammer to enable that mode and force all clients to connect to your rogue wifi network.

Pivoting Over Challenge Based Enterprise WiFi Network

Pivoting Over Challenge Based Enterprise WiFi Network

You will discover how to connect to the organization's access point using PEAP-MSCHAPv2 authentication and relay the response to the authenticator challenge This will allow you to read the private emails on a LAN-hosted POP3 server.

Pivoting Over TTLS-PAP WPA Enterprise Networks

Pivoting Over TTLS-PAP WPA Enterprise Networks

In this post, you will learn how to obtain wifi credentials for a TTLS-PAP enterprise network, connect to the network, and access LAN resources.

Evil Twin Enterprise WiFi Network using Hostapd-Mana

Evil Twin Enterprise WiFi Network using Hostapd-Mana

In this post, you will learn how to set up Honeypot WiFi Enterprise WiFi Network and get the username and password of the client.

Find Hidden Network Backdoor in WiFi Firmware

Find Hidden Network Backdoor in WiFi Firmware

In this tutorial, you will learn how to use static analysis to check for backdoors in the OpenWRT firmware binary.

Steal WiFi Login for Enterprise Networks

Steal WiFi Login for Enterprise Networks

In this post, you will learn how to set up a honeypot network so that WiFi clients compatible with enterprise networks can connect to an EAP-TTLS/PAP encrypted network and harvest login credentials in clear text.

Crack WPA2-PSK from Probing Clients

Crack WPA2-PSK from Probing Clients

In this post, I'll show you how to set up a honey pot access point with hostapd and capture the EAPOL handshake from a probing client to brute force the pre-shared key.

Crack Pre-Shared Key of WPA/WPA2 from Live Network

Crack Pre-Shared Key of WPA/WPA2 from Live Network

In this post, you will learn how to capture the 2 out of 4 EAPOL handshakes of WPA network and crack the password from a wordlist.

Break into the WiFi Network and Interact with Services

Break into the WiFi Network and Interact with Services

In this post, I'll go over how to crack the key of a WEP-encrypted WiFi network and pivot into it to interact with vulnerable services running on it.

Decrypt WEP Traffic using Bruteforce with Insufficient IVs

Decrypt WEP Traffic using Bruteforce with Insufficient IVs

In this tutorial, you will learn how to crack the WEP key using only one data packet and a wordlist, and then use the wireshark tool to decode the data packet.

Understand and Interact with OpenWRT

Understand and Interact with OpenWRT

A gentle introduction to the OpenWRT web interface, LuCI, which can be used to configure wireless interfaces as well as remotely monitor traffic.

Creating Honeypot Access Points using Hostapd

Creating Honeypot Access Points using Hostapd

In order to rejoin the network when a client disconnects, the client sends probe requests. To entice probing clients into the network and carry out additional enumeration, you can use hostapd to establish fake hostspot networks.

Preferred Network Lists in Detail

Preferred Network Lists in Detail

As devices store a list of previously used hotspots, the preferred network list in a WiFi client device is an intriguing source of private location information. This post will teach you how to perform reconnaissance using preferred network lists.

WiFi Traffic Reconnaissance using Aircrack-ng Suite

WiFi Traffic Reconnaissance using Aircrack-ng Suite

Hello World! Wireless networks, unlike Ethernet and optical fibres, do not require physical access, and this makes it easier for anyone to passively monitor a network and capture all transmitted frames. Today, I will demonstrate a few tools from the aircrack-ng suite that can collect all in-flight frames such as

WiFi Standard 802.11ac Packet Analysis

packet-analysis

WiFi Standard 802.11ac Packet Analysis

Learn the differences between the 802.11ac standard packets' data in this post, as well as how to extract useful data from their traffic.

Wifi Traffic Analysis in Wireshark

Wifi Traffic Analysis in Wireshark

In this post, you will learn how to analyse wifi traffic from a large packet capture file and drill down to the information that makes sense.

Bypass MAC Filtering using MAC-Changer

Bypass MAC Filtering using MAC-Changer

You'll discover in this post how to use the MAC Changer command to connect to the access point, bypassing the MAC whitelisting on it.