how do I use wifi protected setup on linux ?

rob.rice · 04-11-2016, 08:54 PM

how do I use wifi protected setup on linux ?
what program do I run
is it part of most distros if not where do I get the source code

Ztcoracat · 04-12-2016, 05:18 PM

With Linux you would set up iptables.
http://www.howtogeek.com/177621/the-...inux-firewall/
http://www.cyberciti.biz/tips/linux-...-examples.html

You will have to read about how to configure the ip tables I'm not the man for teaching you that.

Aside from that your ISP should of given you a passphrase (wep or wpa) so you can connect to your wifi.

Timothy Miller · 04-12-2016, 05:34 PM

I'm pretty sure that OP is asking about the button on routers that allows you to press it to auto-connect devices to it without actually putting in the password.

As far as using it, no clue, I've never trusted that feature and disable it on my routers.

rob.rice · 04-12-2016, 05:37 PM

YES that's exactly what I'm asking about

it's at my syster's house
my brother inlaw will not alow me to even look at the router's
configuration
what I need to know is how to catch the info when the
WPS button is pushed

tired to set the password in wicd BUT none of the password encryption configurations worked

suicidaleggroll · 04-12-2016, 05:48 PM

I thought WPS had a horrible security vulnerability that allowed anybody to connect to the network, bypassing your security key - something about the WPS authentication key being a constant string (or an easily calculable one) across an entire manufacturer's line of devices. Every single security article I've ever read on WPS says that it should immediately be disabled.

rob.rice · 04-12-2016, 06:00 PM

Quote:

Originally Posted by suicidaleggroll

I thought WPS had a horrible security vulnerability that allowed anybody to connect to the network, bypassing your security key - something about the WPS authentication key being a constant string (or an easily calculable one) across an entire manufacturer's line of devices. Every single security article I've ever read on WPS says that it should immediately be disabled.

yes it is brute force attack only has to try 11,000 passwords
IF I was willing to leave my computer there for 12 hours
I could get a working password from reaver and own the router
some one set it up and changed the master password

Timothy Miller · 04-12-2016, 06:24 PM

Quote:

Originally Posted by suicidaleggroll

I thought WPS had a horrible security vulnerability that allowed anybody to connect to the network, bypassing your security key - something about the WPS authentication key being a constant string (or an easily calculable one) across an entire manufacturer's line of devices. Every single security article I've ever read on WPS says that it should immediately be disabled.

Glad I've never trusted it.

suicidaleggroll · 04-12-2016, 07:27 PM

Quote:

Originally Posted by rob.rice

yes it is brute force attack only has to try 11,000 passwords
IF I was willing to leave my computer there for 12 hours
I could get a working password from reaver and own the router
some one set it up and changed the master password

It's much worse than that.
Certain manufacturers (eg: d-link and belkin) derive the WPS key directly from the router's MAC address which is sent unencrypted in every packet. All an attacker has to do is sniff a single packet and they're in. In the case of belkin they also use part of the serial number, but the router will happily tell anybody (not just devices that have already connected) it's serial number unencrypted, so it's not any better.