The issue of wireless network security is becoming increasingly important: according to data KasperskyIn 2023, one in three routers in Russia contained vulnerabilities that allowed attackers to access network traffic or devices. Many users are interested in how secure their own network is—or, for example, a neighbor's network if their signal suddenly becomes unavailable. It's important to understand: Unauthorized access to someone else's Wi-Fi network is a violation of the law. (Article 272 of the Criminal Code of the Russian Federation). However, Testing your own network for vulnerabilities is not only permitted, but also recommended. to protect personal data.
This article will tell you how Legally test the strength of your Wi-Fi to potential attacks using a laptop and specialized software. We'll explore the methods hackers use, how to protect yourself from them, and why even a "strong" password can be vulnerable. All steps described apply exclusively to your own network — testing other people's routers without the owner's permission is punishable by law.
Why is Wi-Fi security testing important?
Most users install their routers out of the box, without changing the default settings. This leaves the network vulnerable to:
- 🔍 Dictionary attack: password selection from popular combinations (for example,
12345678orqwerty). - 🛡️ Protocol exploits: vulnerabilities in legacy encryption standards (WEP, WPA).
- 📡 MITM attacks ("man in the middle"): interception of traffic through fake access points.
- 🔄 Guest network leaks: if it is configured without isolation from the main network.
According to data Positive Technologies68% of routers in home networks have at least one critical vulnerability. Meanwhile, 40% of users never update their device firmware, and 25% use passwords that can be cracked in minutes. Testing your network for hacking resistance means preventing the theft of personal data, banking details, or even remote control of your devices.
Legal aspects: what is allowed and what is not
In Russia and most countries of the world Any actions aimed at hacking other people's networks are classified as a crime:
- ⚖️ Article 272 of the Criminal Code of the Russian Federation ("Unauthorized access to computer information") - up to 7 years of imprisonment.
- 📜 Article 273 of the Criminal Code of the Russian Federation ("Creating malware") - if specialized tools are used.
- 💳 Article 159.6 of the Criminal Code of the Russian Federation ("Computer information fraud") - if access was used to steal data.
However testing your own network is not only allowed, but encouraged. Moreover, some companies (for example, Yandex or Sberbank runs bounty programs where people pay for discovering vulnerabilities in their systems. For home use, just follow these two rules:
- Check only your network (or a network for which you have written permission from the owner).
- Do not use the data obtained to access other people's resources or devices.
Preparing your laptop for Wi-Fi security testing
To check the stability of the network you will need:
- 💻 Laptop with Wi-Fi adapter, supporting monitoring mode (most modern adapters are chip-based Intel, Broadcom or Atheros (they are suitable).
- 🐧 Operating system Linux (recommended) Kali Linux or Parrot OS - they contain all the necessary tools "out of the box").
- 📶 Access to your router settings (login/password to enter the web interface).
If you use Windows, you can install VirtualBox and run Kali Linux in a virtual machine. However, for the adapter to function fully in monitoring mode, you may need:
- Disable
Secure Bootin BIOS. - Install drivers for the Wi-Fi adapter manually (for example, for chips Realtek a patched driver is often required
rtl8812au).
How to check if your adapter supports monitor mode?
IN Linux run the command:
iw list | grep -A 10"Supported interface modes"If there is a line in the output monitor, the adapter fits. In Windows you can use the utility Wireshark for verification.
Wi-Fi Security Testing Tools
Legal tools used for network analysis are also used by cybersecurity specialists:
| Tool | Purpose | Difficulty of use |
|---|---|---|
| Aircrack-ng | Packet analysis, checking password strength against brute force | Average |
| Wireshark | Traffic interception and analysis (legal only within your own network!) | High |
| Reaver | Vulnerability testing WPS (obsolete protocol) | Low |
| Kismet | Scanning networks, detecting hidden SSIDs | Average |
| WiFi Pumpkin | Simulating Man-in-the-Middle Attacks (For Training Only!) | High |
Important: tools like Reaver or WiFi Pumpkin may be blocked by antivirus software - their use outside of a controlled environment (e.g. a virtual machine) is not recommended.
Step-by-step instructions: how to test your Wi-Fi network
Let's look at the process using an example Kali LinuxAll actions are performed exclusively on your network:
- Putting the adapter into monitoring mode:
sudo airmon-ng start wlan0(Where
wlan0— the name of your Wi-Fi adapter; check it with the commandip a). - Scanning available networks:
sudo airodump-ng wlan0monFind your network in the list and write it down
BSSID(MAC address of the router) and channel (CH). - Capturing authentication packets:
sudo airodump-ng -c [channel] --bssid [BSSID] -w capture wlan0monWait until the column
#Dataa value > 10,000 will appear (this means that enough data has been captured for analysis). - Checking password strength:
sudo aircrack-ng -w [path_to_dictionary] capture-01.capYou can use as a dictionary
rockyou.txt(part of Kali Linux).
Make sure only your network is being tested
Create a backup copy of your router settings
Disconnect important devices from Wi-Fi during the test.
Use a virtual machine for security-->
If the password was cracked in a short time (less than 1 hour), it needs to be changed urgently to a more complex one. Optimal password:
- 🔐 Length not less than 12 characters.
- 🔤 Contains upper and lower case letters, numbers, special characters.
- 🎲 Is not a dictionary word or phrase (e.g.
Password123!- bad option).
Common Vulnerabilities and How to Fix Them
Most hacks occur due to errors in router settings. Here are the most common issues and how to fix them:
| Vulnerability | Risk | How to fix |
|---|---|---|
| Usage WEP or WPA | The password can be cracked in minutes | Go to WPA2-PSK (AES) or WPA3 |
| Included WPS | PIN brute-force vulnerability | Disable WPS in the router settings |
Standard login/password for the admin panel (admin/admin) |
An attacker can change the router settings. | Change to complex credentials |
Open ports (eg. 8080, 7547) |
Remote router management | Close unnecessary ports in the firewall settings |
Pay special attention to your router firmware. Outdated versions often contain critical vulnerabilities, such as:
- 🕳️ CVE-2019-11845 (vulnerability in TP-Link, allowing to bypass authentication).
- 🔌 CVE-2021-20090 (remote code execution on routers) Netgear).
How to Protect Your Network from Hacking: A Checklist
To make your Wi-Fi as secure as possible, follow these steps:
Change the default password for the router's admin panel
Disable WPS and UPnP
Enable MAC address filtering (not a panacea, but will make it more difficult for an attacker)
Update your router firmware to the latest version
Hide SSID (do not show the network name in the list of available ones)
Set up a guest network with isolation from the main one
Use VPN to encrypt traffic-->
Additionally, you can:
- 🔄 Enable two-factor authentication to access router settings (if supported).
- 📡 Reduce signal strength to the minimum necessary (so that the network is not accessible outside your apartment).
- 🛡️ Use a separate VLAN for smart home devices (such as cameras or light bulbs).
Important: No single method provides 100% protection, but a comprehensive approach significantly reduces risks. Regularly (every 3-6 months) repeat security testing, especially if new devices or guests connect to your network.
What to do if you suspect your network has already been hacked?
1. Immediately change your Wi-Fi password and the router admin panel password.
2. Check the list of connected devices in the router settings (section DHCP Clients or Connected Devices).
3. Update your router's firmware and reset it to factory settings.
4. Check your computers and smartphones for malware (for example, using Kaspersky Virus Removal Tool).
5. If your suspicions are confirmed, consider replacing the router—some vulnerabilities cannot be fixed programmatically.
FAQ: Answers to frequently asked questions
❓ Is it possible to test a neighbor's network if they have given verbal consent?
No. Legal testing requires written consent specifying the purposes, methods, and timeframes. Verbal consent is not legally binding and will not protect you if a neighbor contacts the police. Furthermore, even with the owner's consent, such actions may be considered "unauthorized access" by third parties (such as a provider).
❓ What password is impossible to hack?
There are no absolutely strong passwords—it all depends on the computing power of the attacker. However, a password of length 16+ characters using a random set of letters, numbers and special characters (for example, 7x#pL9!vQ2$mK5@z) will make a brute-force attack economically unfeasible. To generate such passwords, use password managers (KeePass, Bitwarden).
❓ Why doesn't my router support WPA3?
Standard WPA3 was released in 2018, and many routers released before 2020 do not support it. If updating the firmware is not possible, use WPA2-PSK with encryption AES (Not TKIP!) and a complex password. Also check if it's blocking WPA3 your Internet service provider (sometimes this is done for compatibility with older subscriber devices).
❓ Can I use a smartphone instead of a laptop for testing?
Theoretically yes, but with serious limitations:
- 📱 On Android root rights and specialized applications will be required (for example, WiFi Analyzer or NetCut).
- 🍎 On iOS testing is almost impossible due to system limitations.
- 🖥️ Smartphones do not support the Wi-Fi adapter monitoring mode, so most tools (Aircrack-ng, Wireshark) will not work.
For a full analysis it is better to use a laptop with Linux.
❓ What happens if I accidentally connect to someone else's network?
If the connection occurred accidentally (for example, to an open network with a similar name), disconnect immediately And:
- Remove the saved network from the list of connections.
- Disable automatic connection to unknown networks (
Settings → Wi-Fi → Advanced). - Check your device for suspicious activity (for example, unexpected outgoing connections in Task Manager).
If you've been actively using someone else's network (for example, downloading files), the owner may receive a notification from their ISP about suspicious activity. In this case, it's best to warn your neighbor about the accidental connection in advance.
Remember: Network security is not a one-time setup, but an ongoing process.Update your router firmware regularly, monitor connected devices, and use strong passwords. If you're unsure of your skills, consult a cybersecurity specialist—it's cheaper than the consequences of a hack.