11
votes
How can I find Protected EAP credentials of a wireless network stored on Windows 7?
You can find an encrypted (with CryptProtectData function) version of PEAP credentials stored in the binary data value named "MSMUserData" in the registry locations already specified in the ...
4
votes
Accepted
Decrypting WPA2-Enterprise (EAP-PEAP) in Wireshark
Nowhere.
Capturing the PEAP handshake is useless, as the session key for EAP-TLS, EAP-PEAP, EAP-TTLS is derived from the TLS master secret, which is protected by the TLS handshake – it is the same as ...
- 454k
4
votes
Accepted
Can I use Kerberos for EAP without the RADIUS server getting anything but a ticket?
No, unfortunately not. It's not a limitation in FreeRADIUS as much as there's no EAP method which supports Kerberos natively. The only way to do kerberos login with RADIUS is to use an EAP method ...
3
votes
Accepted
ddwrt and wpa2 KRACK patch or update?
You are on a pretty old build for DDWRT. Download r33525 from 2017 betas folder. This one has the KRACK patch. The update was released on 17th October, 2017.
Link: http://www.dd-wrt.com/site/support/...
- 452
3
votes
Enabling WPA3 on a client
In case, you'd changed the router and/or AP settings on the router after you'd connected and saved the AP on the Windows 10 host, try to forget the AP on Windows and reconnect.
It fixed the issue in ...
- 31
2
votes
Accepted
Interpret output for `iw list`
Yes, you can do what you asked, as long as you are okay with publishing your local network on the same channel as the existing AP (wireless router) that you are joining in managed client mode.
Here's ...
- 104k
2
votes
Using Raspberry Pi as Wifi AP : WPA[2]-PSK works but EAP-TLS results in "IE in 3/4 msg does not match with IE in Beacon/ProbeResp"
I have same problem on Pi4/ModelB with Pi OS.
The difference of RSN IE is only bit 0 (Pre-Auth capability).
So I added following:
rsn_preauth=1
rsn_preauth_interface=eth0
This works fine.
I will try ...
- 21
2
votes
Do all devices in the same network have to use the same security standard (WEP/WPA/WPA2)?
WPA2 (AES) and WPA (TKIP) can be used as mixed mode WPA2/WPA on a common SSID, allowing both clients to connect with the the same passphrase. In this case, the AP simply advertises both encryption ...
- 1,669
2
votes
Accepted
How to getback to wpa2 psk from wpa2 enterprise?
WPA2/3-ENT requires you to configure a RADIUS server behind the router to authenticate against. You configure users and password on the directory (e.g. Active Directory) that is queried over RADIUS.
...
- 2,900
2
votes
DHCP failure when rebooting RPI 2
i had similar issue i was able to fixed running these commands:
sudo systemctl disable dhcpcd.service
sudo systemctl reboot
the issue seems to be that is that dhcpcd.service is being installed in ...
- 319
1
vote
Doesn’t WPA2 work together with my Network card?
Do I have to use it together with safety type 802.11
There's no such safety type. 802.11 by itself is just the standard for "Wi-Fi in general".
or can I also use it together with WPA2, ...
- 454k
1
vote
How to know the domain for a WiFi 802.1x / WPA3-enterprise certificate?
You can indeed find the correct domain in the network's certificate (PEAP uses regular TLS certificates that would have it either in the CN or SAN), but having the device automatically take it from ...
- 454k
1
vote
Sequence of events for WPA and DHCP when a station connects to an AP
Very briefly: WPA authentication and DHCP are completely independent.
WLAN association and WPA authentication have to be completed before any data is transferred, and data here includes DHCP packetes.
...
- 16.9k
1
vote
Unified Write Filter with WPA2-Enterprise PEAP-MSCHAPv2
Just having the exact same problem with an application that stores a few settings in HKCU registry keys. Since it's neither possible to commit HKCU subkeys through UWF nor exclude them, it seems the ...
- 166
1
vote
Sign into WPA2 network that requires a username from mac terminal?
I wish networksetup had a username option
networksetup en0 on
networksetup -setairportnetwork en0 ssidHERE PSKpasswordHERE
per airport command in /System/Library/PrivateFrameworks/Apple80211....
- 51
1
vote
Cracking WPA2 using Intel HD Graphics GPU
For future searchers:
As of hashcat version 3.00, CPU and GPU hashcat were merged into a single project, using OpenCL to abstract the platforms.
If you install the Intel OpenCL runtime for GPUs, you ...
- 1,223
Only top scored, non community-wiki answers of a minimum length are eligible