First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
0

How to see if WPA/WPA2 is enabled?

  • retag add tags

Hello, I just captured some Beacon Frames from my Wifi for education purpose. The network is WPA2 encrypted, but which flag shows me that information? Thanks for any help.

Manny318's avatar
1
Manny318
asked 2020-11-20 18:11:14 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

You want to look at the RSN IE (information element):

Tag: RSN Information
   Tag Number: RSN Information (48)
   Tag length: 20
   RSN Version: 1
   Group Cipher Suite: 00:0f:ac (Ieee 802.11) AES (CCM)
   Pairwise Cipher Suite Count: 1
   Pairwise Cipher Suite List 00:0f:ac (Ieee 802.11) AES (CCM)
   Auth Key Management (AKM) Suite Count: 1
   Auth Key Management (AKM) List 00:0f:ac (Ieee 802.11) WPA
   RSN Capabilities: 0x0028

This will provide some of the information needed: WPA2 supported, Personal (PSK) or Enterprise. This example is WPA2-Enterprise.

Bob Jones's avatar
1.5k
Bob Jones
answered 2020-11-20 18:40:00 +0000, updated 2020-11-25 19:33:29 +0000
edit flag offensive 0 remove flag delete link

Comments

Thank you! :)

Manny318's avatar Manny318 (2020-11-20 20:35:38 +0000) edit

WPA2 = uses the RSN Information element (48)

WPA = uses Element ID 221 with OUI and type fields of 00:50:F2:01

Amato_C's avatar Amato_C (2020-11-24 20:58:03 +0000) edit
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer