In this post, we talk about, Is the free Wifi network is safe or not? how to be safe on the Untrusted Wifi network and is that possible to hackers sniff usernames and passwords and other credential details on the unsecured network
The Public wifi is the most attractive one since 2000. some railway station, airport or some coffee shops provide Free wifi for his customers. But the public wifi is not secure for our personal data protection.
Before we talk about protection first we know how its work? what are the requirements the hacker need to perform this attack
Typically to perform this attack does not need elite hacking skill. It can be successful within some mouse clicks in basic level
Requirements:
Most of the public Network does not have a password or any encryption technics.
And don't think the password protected wifi is safe because some wifi network password easily shared everyone
The Wireshark is open source and the most popular network packet analyzing tools, it was available both Windows and Linux platforms, it can analyze all transmitted networks packets on the network
Difference between HTTP and HTTPS?
HTTPS is a same as HTTP But In HTTPS provides an encrypted connection between your computer to the server
.
The Wireshark can analyze both packets But HTTPS packets are encrypted we cannot decrypt the information without knowing the decryption key.
Simply this name tells what kind of this attack. That hacker stays between our network and computer he can steal even modify the packets you sent and receive
And also he can do sniff login credentials
The login requests are called the "post request". It can easily to filter the past request only on the Wireshark sniffed packets
I already write that in clearly on another blog here the link
How to sniff usernames and passwords using Wireshark
In next Fake wifi connection, also knows as Evil twin attack, the create a fake wifi network looks like the original SSID name or little change.
if you connected that network he can monitor your activity, so when you connect the free wifi just ask any authorized person to What is the Wifi SSID name
Okay, let's talk about protection from that:
if in any login form on the website ensure that websites were have encrypted, look at the corner of URL in browser The green symbol and lock sign it indicates as an HTTPS site.
Nowadays most of the popular websites like facebook, Gmail all has this feature
That extension automatically encrypt your connection on the internet
It is ultimate move for protection on any network
The VPN was available both free and paid, you can expect more features on the paid version like Fast anonymous surfing, block malicious website and lot more
The Public wifi is the most attractive one since 2000. some railway station, airport or some coffee shops provide Free wifi for his customers. But the public wifi is not secure for our personal data protection.
Before we talk about protection first we know how its work? what are the requirements the hacker need to perform this attack
Typically to perform this attack does not need elite hacking skill. It can be successful within some mouse clicks in basic level
Requirements:
- The unsecured wifi(Public WifiNetworks)
- Network packet analyzer (Wireshark)
- HTTP Protocol (The hacker steals only on unencrypted network protocol packets (HTTP)
What is the Unsecured wifi?
In anyone can connect that network even some unauthorized persons too. its called as the unsecured networkMost of the public Network does not have a password or any encryption technics.
And don't think the password protected wifi is safe because some wifi network password easily shared everyone
What is the Wireshark?
What is the HTTP?
The HTTP stands for HyperText Transfer protocol (Unencrypted ) all packets are not encrypted.Difference between HTTP and HTTPS?
HTTPS is a same as HTTP But In HTTPS provides an encrypted connection between your computer to the server
.
The Wireshark can analyze both packets But HTTPS packets are encrypted we cannot decrypt the information without knowing the decryption key.
How to the hackers do that?
If you and hacker connected on the same network and he captures all the network packets using Wireshark they can perform so many attacks The most popular one The Man In The Middle attackSimply this name tells what kind of this attack. That hacker stays between our network and computer he can steal even modify the packets you sent and receive
And also he can do sniff login credentials
The login requests are called the "post request". It can easily to filter the past request only on the Wireshark sniffed packets
I already write that in clearly on another blog here the link
How to sniff usernames and passwords using Wireshark
In next Fake wifi connection, also knows as Evil twin attack, the create a fake wifi network looks like the original SSID name or little change.
if you connected that network he can monitor your activity, so when you connect the free wifi just ask any authorized person to What is the Wifi SSID name
Okay, let's talk about protection from that:
AVOID UNSECURED NETWORK
Maximum Try to avoid to do critical operation like banking, and important account login on the Untrusted networkDon't use same login Information:
If a hacker gets compromised you're any HTTP website passwords, then he tries to other important websites, like google, facebook, banking websites,
So don't use same passwords even same structure of password
USE HTTPS PROTOCOL:
I am already told, in HTTPS packets information could not be decrypted without the decryption key
if in any login form on the website ensure that websites were have encrypted, look at the corner of URL in browser The green symbol and lock sign it indicates as an HTTPS site.
Nowadays most of the popular websites like facebook, Gmail all has this feature
HTTPS EVERYWHERE:
If that website does not have an SSL just try the HTTPS Everywhere browser extension, it can available both chrome and firefox
That extension automatically encrypt your connection on the internet
Virtual private network(VPN)
Is the smart choice on the untrusted network, The VPN creates the secure proxy tunnel and send the packets on over high-level encryption.
The VPN was available both free and paid, you can expect more features on the paid version like Fast anonymous surfing, block malicious website and lot more
Okay thanks for reading my blog, I hope you can understand some question about wifi security how its work? and how to protect yourself
if you have comment place in that under the comment section
don't forget to follow my social pages
http://www.facebook.com/smartmovingforward
if you have comment place in that under the comment section
don't forget to follow my social pages
http://www.facebook.com/smartmovingforward
nice and very clear explanation
ReplyDeletekeep it up...