How to Test Wi-Fi Security: Legal Ways to Check Your Network for Vulnerabilities

Wi-Fi Security Testing Tools

Both software solutions and hardware devices are used to scan networks for vulnerabilities. Below is a table of popular tools and their purposes:

For beginners, the easiest option is to use the router's built-in features. For example, in the admin panel. ASUS RT-AX88U there is a section Security Scan, which automatically checks the network for vulnerabilities. More experienced users can install Kali Linux (distribution for pentesting) and use Aircrack-ng to test password strength.

Example command to scan the network using Nmap:

nmap -sV -O 192.168.1.1

This command will show the open ports of your router (usually by default 192.168.1.1) and the versions of running services. If you see open ports like 23 (Telnet) or 7547 (TR-069), they must be closed in the router settings.

⚠️ Warning: Some tools (eg. Aircrack-ng) require switching the network card to the mode monitor mode, which may disrupt the operation of other devices on the network. Run tests in an isolated environment or warn your household about possible interruptions.

Practice: How to Test Your Network for Vulnerabilities

Let's look at a step-by-step guide for a basic Wi-Fi security check. For this, we'll need a laptop with Kali Linux (can be run in a virtual machine) and a router to which you have access.

Make sure the network you're testing is yours|Backup your router settings|Disconnect important devices from the network|Prepare Kali Linux (or another tool)|Write down your current Wi-Fi settings (SSID, password, channel)-->

Step 1: Scan for available networks

Open the terminal in Kali Linux and run the command:

sudo airmon-ng start wlan0

Then run the scan:

sudo airodump-ng wlan0mon

You will see a list of available networks indicating:

• 📶 BSSID — MAC address of the router;
• 🔒 ENC — encryption type (WPA2, WPA3, WEP);
• 📊 PWR — signal level;
• 🔄 CH - channel.

Step 2: Checking Password Strength

If your network uses WPA2-PSK, you can test your password's resistance to brute-force attacks. To do this:

1. Capture handshake (authentication package) with the command:

   sudo airodump-ng -c [channel] --bssid [BSSID] -w capture wlan0mon

2. Wait for the message to appear WPA handshake in the terminal.
3. Use Aircrack-ng to check the password:

   aircrack-ng -w [dictionary_path] capture-01.cap

If the password is guessed within a few minutes, it needs to be changed urgently to a more complex one.

Step 3: Check for KRACK vulnerability

KRACK (Key Reinstallation Attack) - attack on the protocol WPA2, which allows you to decrypt traffic. For testing:

1. Install the tool krackattacks-scripts:

git clone https://github.com/vanhoefm/krackattacks-scripts.git

2. Follow the instructions in the repository to run the test.

If your router is vulnerable, update the firmware to the latest version. Most manufacturers have released patches for KRACK after 2017.

How to Protect Your Wi-Fi from Hacking: 10 Practical Tips

After testing, it is necessary to eliminate the vulnerabilities found. Here A must-have network security checklist:

1. Change the default router password

   Many people use default combinations like admin:admin or root:passwordThe password for accessing the admin panel must be complex (at least 12 characters with numbers, letters, and special characters).

2. Update your router firmware

   Outdated software versions contain known vulnerabilities. Check for updates in the section Firmvera or System tools.

3. Disable WPS and UPnP

   These features are convenient, but not secure. WPS vulnerable to brute force, and UPnP may allow attackers to redirect traffic.

4. Use WPA3 or WPA2 with AES

   Avoid WEP And WPA-TKIP — these protocols can be cracked in minutes. The optimal choice: WPA3-SAE or WPA2-AES.

5. Hide your SSID (not always effective, but will make things more difficult)

   Disabling network name broadcasting (SSID) will not make it invisible to professionals, but will protect it from accidental connections.

6. Configure MAC address filtering

   Allow connections only to trusted devices. Cons: You'll have to manually add new devices.

7. Enable guest network for IoT devices

   Smart bulbs, cameras, and other gadgets often have weak security. Isolate them on a separate network.

8. Use a VPN for critical data

   Even if the network is hacked, the VPN will encrypt your traffic (for example, ProtonVPN or WireGuard).

9. Check connected devices regularly

   In the router admin panel (DHCP Clients List) check if there are any unknown gadgets.

10. Disable remote control of your router

    Function Remote Management allows you to control your router over the internet—this is a potential attack surface.

You can further configure network segmentation (VLAN) to separate traffic between different devices. For example, in routers Ubiquiti UniFi or TP-Link Omada This is done through the controller.

⚠️ Attention: Some internet providers block access to router settings or link it to their application (for example, Rostelecom or MTS). In this case, please contact support to unblock it or request access to advanced settings.

Common Mistakes When Setting Up Wi-Fi Security

Even experienced users sometimes make mistakes that can ruin all their network security efforts. Here are the most common ones:

• 🔄 Using the same password for Wi-Fi and the router admin panel

  If an attacker guesses the network password, they will also gain access to the router settings. Passwords must be different.

• 📱 Connecting to public networks without a VPN

  Your traffic may be intercepted in cafes, airports, or hotels. Always use a VPN on untrusted networks.

• 🔌 Untimely firmware update

  Manufacturers regularly release patches for new vulnerabilities. For example, in 2023, a critical vulnerability was discovered in routers. TP-Link Archer, which allows arbitrary code to be executed.

• 🔑 Storing your Wi-Fi password in plaintext

  Many people leave their passwords on a sticky note on their router or in their smartphone's notes. Use password managers (Bitwarden, KeePass).

• 🌐 Ignoring notifications about new devices on the network

  If your router sends a notification about an unknown device connecting, check it. This could be a sign of a hack.

Another typical mistake is use of weak encryption algorithmsFor example, some routers include it by default. WPA2-TKIP instead of WPA2-AESThe difference is that TKIP vulnerable to attacks like Chopchop or Michael Exploit, whereas AES considered safe (when configured correctly).

You can check the current encryption type in the router settings (section Wireless Security) or via the command in the terminal:

netsh wlan show hostednetwork setting=security

(for Windows).

Legal aspects: what will happen for hacking someone else's Wi-Fi?

In Russia, Wi-Fi hacking is punishable under several articles of the Criminal Code:

• 📜 Article 272 of the Criminal Code of the Russian Federation — "Unauthorized access to computer information"

  Punishment: a fine of up to 200,000 rubles or imprisonment for up to 2 years (if the hack caused damage).

• 📜 Article 273 of the Criminal Code of the Russian Federation — "Creation, use and distribution of malware"

  If specialized tools were used for hacking (for example, Reaver), this may be regarded as the creation of malware.

• 📜 Article 138 of the Criminal Code of the Russian Federation — "Violation of the privacy of correspondence"

  Interception of traffic (such as messages or browser history) falls under this article.

Examples of real cases:

• In 2022, a man was convicted in Moscow of hacking his neighbors' Wi-Fi to download movies. He received a one-year suspended sentence under Article 272 of the Russian Criminal Code.
• In 2021, a hacker in St. Petersburg used other people's networks to mine cryptocurrency. He was sentenced to 1.5 years in a penal colony.

Important: Even if the network is not password protected, connecting to it without the owner's permission is illegal.In some countries (for example, Germany), this carries fines of up to 50,000 euros.

If you've been hacked, gather evidence (router logs, screenshots of unknown devices) and file a police report under Article 272 of the Russian Criminal Code. In some cases, your ISP can help identify the attacker using their MAC address.

FAQ: Answers to frequently asked questions about Wi-Fi security