search

schloss / insecurity-demos

A packaged, graphical user interface for demonstrating various digital security threats and mitigations in a training room context.
4 stars 2 forks source link

Device Padlocks should not go green unless a WPA password has been entered for the relevant WiFi network #61

Open poser opened 10 years ago

poser commented 10 years ago

When seeing eapol traffic on a nearby WiFi network (on the same channel or, in this case, a neighboring channel), the corresponding device padlock turns green, even though I have never specifically targeted this network.

double-green-vole commented 10 years ago

Isn't that a feature?

poser commented 10 years ago

I don't think so. Not until we implement multi-network WPA-keys and a long-running tshark command of some sort. As is, we capture those eapol packets, sure, but we'll never be able to decrypt that traffic, because, even if we then switch over to sniffing that WiFi network (which is currently the only way we can give the app the appropriate WPA password), we'll be doing so with a new tshark command, which means we'll have lost the eapol packets.