Ask Your Question
0

How to add wireless encryption type as a column

asked 2021-09-15 17:29:20 +0000

Draft gravatar image

updated 2021-09-17 12:10:01 +0000

grahamb gravatar image

Hello,

I would like to add the wireless encryption(wep/wpa/wpa2) to the display.

I have created a new collumn, but when i look under "collumn preferences" >> "type" and click the dropdown menu it seems the right option is not available there?

Maybe there is another way, which i don't know of?

Edit: Trying to make my question complete, i would like to see the encryption method when my wireless interface is in monitor mode(linux) and scanning wireless APs.

edit retag flag offensive close merge delete

Comments

when my wireless interface is not monitored(linux)

I am not sure exactly what this means.

Some parts of the wireless security setting can be pulled from a beacon (among other frame types) from the RSN information element. You can put this into a column by finding one of them, right click --> apply as column. But your adapter would have to be in monitor mode to do this, otherwise the beacons would not show with a capture.

Bob Jones gravatar imageBob Jones ( 2021-09-15 21:07:55 +0000 )edit

Thank you for your quick reply.

I am experimenting with airmon-ng with the wlan interface in non-monitored mode.
I have tried what you said in monitored mode, but still i don't see the wireless encryption passing?

Since i recently installed this distro, i guess i'm still using the default wireshark. Is there a setting which i need to enable/disable for showing wireless encryption perhaps?

Draft gravatar imageDraft ( 2021-09-16 14:15:34 +0000 )edit

I think airmon-ng is used to put the interface into monitor mode, yet you state that you are using it with your interface _not_ in monitor mode. I would say what do you need airmon-ng for, if you don't want to be in monitor mode?

So what do you really want to do, at a high level? Is there some user interface that you have seen that you want to emulate? Identifying the networks around you and the security they support can be obtained from other tools that may be better than Wireshark.

Bob Jones gravatar imageBob Jones ( 2021-09-16 15:17:05 +0000 )edit

You are correct, sorry for the confusion, my bad. I use airmon-ng as intended, to put the interface in monitor mode. I have corrected it now...

As for your question, i am doing an ethical hacking course, and i need wireshark for that. It's handy, although nowadays almost everybody uses wpa/wpa2, to see what encryption method is being used.

Draft gravatar imageDraft ( 2021-09-17 12:02:36 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-09-17 16:25:11 +0000

Bob Jones gravatar image

updated 2021-09-17 16:26:23 +0000

For reviewing networks around you to see what security they use, I would suggest kismet or bettercap on Linux.

Other OSs have other tools that can do similar things.

To pick some of this information out of a packet capture, look at the Beacons (wlan.fc.type_subtype == 0x08) and find the RSN information element, if it exists. This will indicate, for WPA networks, the security settings:

image description

There are various settings for these values that indicate the different types of security, like WPA2-Personal, or WPA2-Enterprise, WPA or WPA3, etc. The picture is an example of WPA2-Personal. If it were for WPA2-Enterprise, key management (AKM) would be WPA. There are many combinations.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-09-15 17:29:20 +0000

Seen: 334 times

Last updated: Sep 17