Hi, Q about WPS - General Questions and Answers

Hi, sorry for bad english
We was can connect wifi with WPS in android 8 , then android 9 was not working wps connect, and android 10 Too
now i will download android 11, my question is :
is WPS connect to wifi future, working again in android 11 or not ?
thx , love u xda community

Excuse me, do you mean WPS Office or something else with 'WPS'?

James_Watson said:
Excuse me, do you mean WPS Office or something else with 'WPS'?
Click to expand...
Click to collapse
wps wifi connect bro

No google officially patched the WPS pin vulnerability and you can no longer use it to hack wifi networks.
You can still hack wifi networks with root access though.

XDHx86 said:
No google officially patched the WPS pin vulnerability and you can no longer use it to hack wifi networks.
You can still hack wifi networks with root access though.
Click to expand...
Click to collapse

Evon88 said:
Click to expand...
Click to collapse
Getting free wifi is good and all, but think about the person who has to pay those extra charges.
Even if you think you would use it moderation, it's still morally bad.
Not to mention the security issues of using stolen wifi might imply, for example they can attack you with MITM-like attacks, ARP spoofing, DNS spoofing, HTTP session hijacking, etc...
Even if the original owner may not know this stuff, since you broke into the network then there is the possibility that there is someone else who can hack into the same network. And it just happens that this person knows his stuff and launches MITM attack on the whole network. What are you gonna do then?
What I want to say is. Stop being an asshole, and appreciate whatever you already have.

XDHx86 said:
Getting free wifi is good and all, but think about the person who has to pay those extra charges.
Even if you think you would use it moderation, it's still morally bad.
Not to mention the security issues of using stolen wifi might imply, for example they can attack you with MITM-like attacks, ARP spoofing, DNS spoofing, HTTP session hijacking, etc...
Even if the original owner may not know this stuff, since you broke into the network then there is the possibility that there is someone else who can hack into the same network. And it just happens that this person knows his stuff and launches MITM attack on the whole network. What are you gonna do then?
What I want to say is. Stop being an asshole, and appreciate whatever you already have.
Click to expand...
Click to collapse
Dude thx and im not asshole, i have free networks here, but i just asking bcuz i miss this thing from long way, i have personal internet sub, and i just asking bcuz sometimes, internet here not good all time all places, so its not bad to send whatsapp msg using another wifi
dude im rly not evil, but thank you to advice me, and u try to make me not evil

Related

Cracking a WiFi network on Android?

Hi there,
I was wondering if there is any app at that allows the cracking of a WiFi network that is secured with a WEP password?
Thanks in advance!
PS: Before any of you start wondering, I'm not using it for illegal purposes. If I wanted to do that, I would just use a laptop. Thanks.
No response?
WEP cracking apps need compatible wifi drivers as well as code that supports the processor architecture.
WEP cracking can be done cheap on a PC.
mattrb said:
WEP cracking apps need compatible wifi drivers as well as code that supports the processor architecture.
WEP cracking can be done cheap on a PC.
Click to expand...
Click to collapse
Yes, but I'm looking for a way to do it on my Android phone Is there any way that exists at this moment?
I think the closes you'll get right now is the app named
'Penetrate'
Its in the market.
It calculates the default password for a wifi network.
Some networks dont work.
But this gave me free wifi in a number of times
can not be done because the driver does not support monitor mode, to my knowledge.
Spoetnicus said:
I think the closes you'll get right now is the app named
'Penetrate'
Its in the market.
It calculates the default password for a wifi network.
Some networks dont work.
But this gave me free wifi in a number of times
Click to expand...
Click to collapse
Yea but that's for American routers mostly, and I'm from Belgium
Spoetnicus said:
I think the closes you'll get right now is the app named
'Penetrate'
Its in the market.
It calculates the default password for a wifi network.
Some networks dont work.
But this gave me free wifi in a number of times
Click to expand...
Click to collapse
I was just wondering the other day if an app like this existed....thanks!!!
Ad Fundum said:
Yea but that's for American routers mostly, and I'm from Belgium
Click to expand...
Click to collapse
Actually Penetrate is done by a portuguese guy and supports mostly european routers like thomson and dlink, i already accessed a lot of thomson networks
Sent from my HTC Desire using Tapatalk
And there is no other way?
Android is based on a Linux-kernel, but that doesn't mean it can run Linux-applications like aircrack-ng without changing anything. You can use the Penetrate app in Belgium however, there are quite a lot of Thompson SpeedTouch modems (Tele2) here that can be cracked using that app.
It doesnt really crack the password eh?
It just sees where people were too lazy to change the default password.
Today I was at a spot with 12 different internet spots (my friends home), and went to try if I could acces my friends internet. Not even one of the 12 (including the WEP based of my friend) was able to be calculated with Penetrate ..
Spoetnicus said:
It just sees where people were too lazy to change the default password.
Click to expand...
Click to collapse
Exactly, it uses an algorithm to generate the default pass. So if the user has changed it then it won't work.The old BTHomehubs were caught by this too but they released an update to fix it
penetrate doesn't seem to work with us routers....tried at several different locations today and none could be cracked
If you say you are trying to crack a network legally, you cant be serious. If you dont know the password to a network, go to the router and reset it. If you do not own the router, then it's illegal to try and crack it.
sitlet said:
If you say you are trying to crack a network legally, you cant be serious. If you dont know the password to a network, go to the router and reset it. If you do not own the router, then it's illegal to try and crack it.
Click to expand...
Click to collapse
Life is sooo boring doing only legal stuff...
afaik there's no wep cracker availl yet, only shark had been done so far...
You can also try Router Keygen, basically the same thing but open source.
Although it supports more networks and has more features for free.
hxxps://market.android.com/details?id=org.exobel.routerkeygen
Not that you want to read the pages, but at this thread: http://forum.xda-developers.com/showthread.php?t=508871 a bunch of guys are working on something like this for the G1 (and probably similar phones).
That's my 2 cents...
Sent from my HTC ReZound using XDA "I'm not hacking if its legal..."

Major Security Flaw Found In Android Phones

Worth reading http://www.theregister.co.uk/2011/05/16/android_impersonation_attacks/
and perhaps following http://forum.xda-developers.com/showthread.php?t=1086878 (ok -- maybe not -- that thread is pretty useless)
In brief:
The weakness stems from the improper implementation of an authentication protocol known as ClientLogin in Android versions 2.3.3 and earlier, the researchers from Germany's University of Ulm said. After a user submits valid credentials for Google Calendar, Contacts and possibly other accounts, the programming interface retrieves an authentication token that is sent in cleartext. Because the authToken can be used for up to 14 days in any subsequent requests on the service, attackers can exploit them to gain unauthorized access to accounts.​
Announced today, apparently there will be silent OTA patches for Contacts and Calendar.
that is crazy!!!!
this made me feel a little at ease, just a little.
The attacks can only be carried out when the devices are using unsecured networks, such as those offered at Wi-Fi hotspots.
Click to expand...
Click to collapse
not sure what else to say about it.
Bloggers and media like to hype this stuff up.
Bottom line is this. Don't connect to a public wifi you don't trust, and always log in via SSL.
The issue here stems from using public wifi that allows people to sniff your traffic.
For instance:
You walk into starbucks, I'm already there and with my phone I create a mobile hotspot, I call it "StarbucksWifi" for the SSID. You're none the wiser and you connect with your phone (OR with your laptop, it's not just your phone but the media didn't share that).
I turn on Shark Mobile (Wireshark) and start capturing all those lovely packets. I then dissect them later to see your login info etc.
Again, don't connect to public wifi you don't trust or are unsure about. Starbucks uses ATT for hotspots and the wifi name is always ATT from what I remember.
fknfocused said:
that is crazy!!!!
this made me feel a little at ease, just a little.
not sure what else to say about it.
Click to expand...
Click to collapse
Not a real issue unless you're one to use unsecured wifi networks.
joedeveloper said:
Bloggers and media like to hype this stuff up.
Bottom line is this. Don't connect to a public wifi you don't trust, and always log in via SSL.
The issue here stems from using public wifi that allows people to sniff your traffic.
For instance:
You walk into starbucks, I'm already there and with my phone I create a mobile hotspot, I call it "StarbucksWifi" for the SSID. You're none the wiser and you connect with your phone (OR with your laptop, it's not just your phone but the media didn't share that).
I turn on Shark Mobile (Wireshark) and start capturing all those lovely packets. I then dissect them later to see your login info etc.
Again, don't connect to public wifi you don't trust or are unsure about. Starbucks uses ATT for hotspots and the wifi name is always ATT from what I remember.
Click to expand...
Click to collapse
Thanks.
I love hearing about this kind of stuff. It's good to keep current....now I know why they have that accept conditions page at wifi places like starbucks and mcdonalds. You couldn't create that with your hot spot...or could someone
Sent from my SGH-T959V using XDA Premium App
thanks for the info fellas. I rarely connect to wifi spots when Im out and about. Actually, the only time I do is when im home or at work. Looks like im good.
While "always log in via SSL" is a great suggestion, the Google services aren't going to go over a secure channel (unless you have VPN enabled).
The same warning should apply if you aren't using WPA2 -- the older WEP (and WPA) is still common on many "secure" wireless connections, especially home units, and takes not more than a few minutes to crack with widely available tools.
http://www.google.com/search?q=wep+crack
From http://en.wikipedia.org/wiki/Wi-Fi_Protected_Access
WPA2 has replaced WPA; WPA2 requires testing and certification by the Wi-Fi Alliance. WPA2 implements the mandatory elements of 802.11i. In particular, it introduces CCMP, a new AES-based encryption mode with strong security. Certification began in September, 2004; from March 13, 2006, WPA2 certification is mandatory for all new devices to bear the Wi-Fi trademark.​
This is what I was asking about in another post. I like to vacation where I have 0-1 bars on the phone, and motel wifi is available. I would like my pet/house sitting service to be able to call me when I'm away.
Also kid moved to England. We use Skype, Skype on Android is wifi only.
Mostly do use home WPA encrypted, but there should be some kind of safety for those who do need the service. Do not use the phone for personal stuff like banking, etc. even on a network.
And there are areas here in the west where there is no service for any carrier. Canyons are not conducive to line of site.
SGS4G does have wifi calling built in.

[Q] Is it secure to use android on public wifi? How do I protect against droidsheep?

[Q] Is it secure to use android on a public wifi? How do I protect against droidsheep, firesheep, ssl stript...?
I currently use android 2.3.4 and I would love to connect in cafeterias or places alike wich use none. wep. wpa, wpa2 or radius encryption. So that I could use skype or gtalk videocall or even youtube. But I am fearful, am I being paranoid or is it normal to be so cautious? What are the risks? Could somehow my gmail account be hijacked by just connecting to one of this networks with some malicious people around?
Should I use ssh tunneling or vpn?
Wich free vpn or ssh tunneling services would you suggest?
I also found this app, but it seems that it just creates many fake connections wifi and wifi noise so you can camouflage
[APP] Wifi Protector - Wireless Security | Anti WifiKill | Anti DroidSheep
http://forum.xda-developers.com/showthread.php?t=1350941
I've used my phone on several WiFi hotspots ever since my iPhone 3g and have never had a problem getting hacked. It's more about what kind of sites you visit and that is a problem even on a locked secure connection. If someone is good enough it doesn't matter how you protect yourself. It's not worth worrying about though as long as you know how to spot a problem when it arises. I'm sure avg from the market is good enough if you insist on using something. I have never used any of these kind of programs on my phone though.
Sent from my Desire HD using xda premium
devrruti said:
[Q]I also found this app, but it seems that it just creates many fake connections wifi and wifi noise so you can camouflage
[APP] Wifi Protector - Wireless Security | Anti WifiKill | Anti DroidSheep
http://forum.xda-developers.com/showthread.php?t=1350941
Click to expand...
Click to collapse
Well, actually it does not create any connections, no noise and you cannot camouflage with it. It passively monitors your phone for unusual network events and alarms you in case of an active attack against your phone.
Full disclosure: I'm the author.
Gizmoe said:
I've used my phone on several WiFi hotspots ever since my iPhone 3g and have never had a problem getting hacked.
Click to expand...
Click to collapse
How do you know? DroidSheep's attack cannot be noticed without a specialized app.
Gizmoe said:
If someone is good enough it doesn't matter how you protect yourself.
Click to expand...
Click to collapse
If you don't protect yourself someone doesn't need to be good. It's like locking the front door and leave the window open.
gurkedev said:
How do you know? DroidSheep's attack cannot be noticed without a specialized app.
If you don't protect yourself someone doesn't need to be good. It's like locking the front door and leave the window open.
Click to expand...
Click to collapse
To be honest. Mobile security apps are over rated. With a little common sense you will be fine.
gurkedev said:
How do you know? DroidSheep's attack cannot be noticed without a specialized app.
If you don't protect yourself someone doesn't need to be good. It's like locking the front door and leave the window open.
Click to expand...
Click to collapse
I have never had my identity stolen or noticed anything weird going on with my phone that would be a sign of hacking. Nor have I had any online accounts hacked. If someone is worried then they should protect themselves. I'm just saying that I am not worried about it and using a program to protect yourself is not 100% effective. I would be more worried about all the paperwork with your personal information sitting in filing cabinets at places where people have access to them.
Sent from my HTC Desire HD A9191 using xda premium
The issue with connecting to these public networks, or even encrypted ones, is that people usually have bad surfing practices. Your connection to the router might be encrypted, but what if someone has access to the data that the router accepts or sends to the internet.
What you need to do is always use secure protocols to access the services you need like gmail or hotmail.
Besides that, it's always good to have a radar on in case somebody has zombied your device for some delayed exploits.
It is easy to set up a fake router with your computer's WiFi or with another router, name it what you want (ssid) and the mac you want. You can then disconnect a device and make it connect to you.
Evil twin router, rogue WiFi, airpwn, man in the middle, karma, metasploit...
And I don't trust my evil neighbour

[Q] How to turn my android into a wifi hotspot WITHOUT using 3g/4g?

But instead use USB internet passthrough or the wifi connection on the phone.
I have a nds and a psp that don't have wpa2 encryption on it and I cant connect through wifi anymore at my house. So I'm trying to figure out how I can turn my phone (HTC rezound no root) into a wifi hotspot to bypass the encryption and without using 3g/4g.
A quick google search turned up that one user had success by changing his router security settings from AES to AES-TKIP
I would give you the link, but I am not allowed to do that yet...
Hope it works for you.
Auburn_Cap said:
A quick google search turned up that one user had success by changing his router security settings from AES to AES-TKIP
I would give you the link, but I am not allowed to do that yet...
Hope it works for you.
Click to expand...
Click to collapse
The thing is I'm not allowed access to the security settings for my internet.
vat2nike said:
The thing is I'm not allowed access to the security settings for my internet.
Click to expand...
Click to collapse
Figured it was worth a shot. I hope someone will be able to give you the answer you are looking for.
Only other thing I can think of is to see if there are any firmware updates for the PSP and NDS.
Good luck.

Port forwarding with FoxFi or other options

So I have been looking for a way to say goodbye to AT&T's U-Verse and their terrible service/billing.
Now that I have a galaxy S3 and there is decent LTE coverage at home, I would like to use my Unlimited LTE as my main internet service.
This has worked out well tethering with FoxFi and I usually get around 15mb/s down / 6 mb/s up.
However I cannot figure out how to get incoming connections to uTorrent. I don't torrent very often but I like to maintain a good ratio and there are some things which I will seed forever, to make sure they are still available.
I haven't yet rooted my phone though I'm comfortable with it from prior experience. I wouldn't mind rooting it but if I can avoid it for the time being, why bother?
Has anyone had any trouble with Verizon and torrents on an unlimited plan? I don't use an exorbitant amount of data but I wonder about my privacy.
I would be very appreciative if someone could show me how to port-forward or otherwise open my phone to incoming connections from uTorrent through tethering. I have also considered using a VPN to increase my privacy, so if I could use that with my phone connection, I would be very happy.
Thank you to any who devote their time to my cause.
Sorry, I dont have a solution for you. but i would like to know the answer to this as well
i torrent just fine when tethering my Galaxy nexus on verizon (using PDAnet) i use about 20gigs a month or so and the max i ever went with it was 60gigs. but i have not torrent in a long time and have been using my tethering for WoW and L4D2 and downloading steam games
Whoa, you're on u-verse and having bad service and bill? Might want to shoot me a private message to talk about it and I can take a quick looksee of what's going on (I'm a tier 2 technical support agent for u-verse, and you wonder why I'm on Verizon Wireless )
Anyways, the only thing I've learned is that setting up utorrent on the phone is a pain in the ass but will work (been awhile since I've done it) but only when it's on 4G, if it's on the 3G network it won't let you do it (I can't point my figure on why).
scsa20 said:
Whoa, you're on u-verse and having bad service and bill? Might want to shoot me a private message to talk about it and I can take a quick looksee of what's going on (I'm a tier 2 technical support agent for u-verse, and you wonder why I'm on Verizon Wireless )
Anyways, the only thing I've learned is that setting up utorrent on the phone is a pain in the ass but will work (been awhile since I've done it) but only when it's on 4G, if it's on the 3G network it won't let you do it (I can't point my figure on why).
Click to expand...
Click to collapse
Thanks for the consideration. I'll be in touch.
I tried to use uTorrent on my S3, but the private tracker I use only allows supported clients. There is no Android option available. I am going to suggest they add one, but in the mean time, I'm wishing I could run a Linux client on my phone or figure out a way to enable incoming connections over a WiFi/USB tether. Don't know where to start with that, though.
You might want to look at your computer's built in firewall. From my understanding of port forwarding it allows certain traffic to bypass a firewall to a specific client. I don't recall foxfi having any built in firewall so anything connected to it should be in a DMZ
Sent from my SCH-I535 using xda app-developers app
Jarredw said:
You might want to look at your computer's built in firewall. From my understanding of port forwarding it allows certain traffic to bypass a firewall to a specific client. I don't recall foxfi having any built in firewall so anything connected to it should be in a DMZ
Sent from my SCH-I535 using xda app-developers app
Click to expand...
Click to collapse
The built in firewall doesn't block incoming connections when I am using my home wifi (I have set up port forwarding in the router). The only thing I change is that I connect to FoxFi and the port is no longer accessible from outside (no connections are being made to upload in uTorrent.)
BUMP?
Has Anyone gotten anywhere with this, I know its not a firewall somewhere down the line the port is getting blocked but all my firewalls are off....
Mike
androidkitty said:
Thanks for the consideration. I'll be in touch.
I tried to use uTorrent on my S3, but the private tracker I use only allows supported clients. There is no Android option available. I am going to suggest they add one, but in the mean time, I'm wishing I could run a Linux client on my phone or figure out a way to enable incoming connections over a WiFi/USB tether. Don't know where to start with that, though.
Click to expand...
Click to collapse
You should see if they support tixati. I have had nothing but problems with utorrent in the past couple years. Tixati may not look superior at first but it has all the same options plus more. Probably what really draws me to tixati is it allocates the files before download.
VPN Fixed it, Kinda
androidkitty said:
The built in firewall doesn't block incoming connections when I am using my home wifi (I have set up port forwarding in the router). The only thing I change is that I connect to FoxFi and the port is no longer accessible from outside (no connections are being made to upload in uTorrent.)
Click to expand...
Click to collapse
Hey I had the Idea to set up a VPN on the computer, and It did fix the connection problem, got the green, BUT my DL speeds went to crap, Which makes sense, So I guess if you wanna either find a decent VPN provider that can handle the through put could possibly solve the issue...I just jumped on the first free one I came across..
Hope It Helps
Mike
Which VPN did you use eventually mike ?
dumbledon said:
Which VPN did you use eventually mike ?
Click to expand...
Click to collapse
I Started with OpenVPN, which worked OK, But was a PITA to setup, I eventually went to a free VPN through a website, and client configuration, They'd change the password daily, you just jump to the site, log-in get the new Password and your good to go, Speeds where about the same...
And It's been awhile, but I found out the the Issue was AT&T blocking certain websites (Including at the time, My Free Host for my Forum which is now on a VPS..) and have since moved to T-mobile....
Been Awhile and memory isn't as great as it was, Hope this is what you are looking for,
Mike

Categories

Resources