mogoče ti bo tole pomagalo - uf, zgleda da ne bo simpl - dobro pazi kaj delaš:

http://www.tp-link.com/en/support/download/?pcid=201&model=TL-WR841ND

http://forum.tp-link.com/showthread.php?2475-Restoring-factory-firmware-TL-WR841N

@krejzi

sorry, se pravi si res mislil sklopit kot "disable" ... se opravičujem :(

sem razumel "sklopit" kot "vklopit" z tvojim typom .... sem že mislil da mu svetuješ naj vklopi WPS ... sem prehitro sklepal :(

@krejzi:

glede napada s slovarjem:

Ne selektivno brat :)

Preberi cel stavek (od pike do pike) :

now click on the Start attack option and select the Dictionary Attack option. *However you have other attack options are also available***

glede WPS :

"pa obvezno vklopit WPS funkcijo in te nebo noben pohekal :)"

verjetno si mislil ravno obrato (lapsus linguae ali pa vsaj lapsus calami):

"pa obvezno vklopit WPS funkcijo in VSAK te bo pohekal"

Podrobnosti si lahko prebereš tukaj :

http://sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf

*Although WPS is marketed as being a secure way of configuring a wireless device, there are design

and implementation flaws which enable an attacker to gain access to an otherwise sufficiently

secured wireless network.

Some vendors did not implement any kind of blocking mechanism to prevent brute force attacks.

This allows an attacker to try all possible PIN combinations in less than four hours (at 1.3

seconds/attempt).

On average an attack will succeed in half the time.*

nimam izkušenj z njimi .... vedno uporabljam FreeBSD Pfsense ali pa vsaj Mon0wall (obadva sta seveda zastonj) in če že mora bit wireless v isti mreži ga vedno fizično ločim in seveda tudi v FW ...

Stefan over at .braindump released a white paper detailing vulnerabilities in the WiFi Protected Setup (WPS) protocol that allows attackers to recover WPA/WPA2 passphrases in a matter of hours.

[Just when you thought wireless networks were secure with WPA/WPA2 encryption, along comes WiFi Protected Setup (WPS) to make security even easier. Or does it? Due to a flaw in the WPS protocol, it is possible once again to access encrypted wireless networks with ease! Unfortunately, there is no simple fix to this rather large, world-wide security flaw. This talk will explain WPS, how it works, why it's broken, and demonstrate how easy it is to gain access using the free, open-source tool called Reaver.

Tle maš ferik napravo ... ni ti treba imeti pojma o linuxu, če maš dnar...](http://www.reaversystems.com/)

... tako da ponavljam : če nekdo res želi pridobit vaš wep/wpa/wpa2 ga bo dobil ... edina rešitev je FIZIČNA ločitev intraneta od brezžične mreže ( ki naj služi samo za dostop do neta ) ...

za WPS imaš delujoč BDE (brain dead exploit) click'n'run program :

http://en.wikipedia.org/wiki/Wi-FiProtectedSetup

In December 2011, researcher Stefan Viehböck reported a design and implementation flaw that makes brute-force attacks against PIN-based WPS feasible to perform on WPS-enabled Wi-Fi networks. A successful attack on WPS allows unauthorized parties to gain access to the network. The only effective workaround is to disable WPS ..... A tool has been developed in order to show the attack is practical.The firm that released the tool, Tactical Network Solutions in Maryland, says that it has known about the vulnerability since early 2011 and has been using it ....

za WPA2 imajo script kiddies tle razlago v stripu, da ne traja predolgo :

Today i am going to show you how to a crack a Wp2-psk password with windows machine.

"... now within minutes it will found your password and it will show you the password ..."

Ne delajo zastonj stavb brez oken .... ... seveda se da kriptirat prenos da je varen, samo ne z cpu enoto za 100 € :)))

krejzi:

MAC ne pomaga nič, če ti hoce kdo vdreti na network, enostavno posniffa cliente ki so povezani in si spremeni MAC na enega izmed clientovih :)

Popolnoma enako je z enkripcijo ... tak ki zna sniffat bo prišel not anyway ... zato pa obstaja funkcija "separate wirelss from lan"...

... kupiš dober access point on linksysa in ga priklopiš na tale ruter..... sorri nisem se mogel zadržat :;

gradencan:

Enkripcije pa ne morem izklopit - se vedno povezuje še kdo nov...

Če boš vklopil MAC filtriranje se navaden uporabnik ne bo mogel povezati brez da bi njegov MAC naslov vnesel v ALLOWED listo .... tisti ki pa se bo pa se bo povezal kljub temu se bo povezal tudi v šifrirano omrežje v 24 urah bp ... verjemi .... šifriranje pri slabših modelih lahko precej zmanjša domet

aja ... pa ne izkopit broadcasta imena kot nekateri svetujejo ... uporabi decoy in svojo mrežo poimenuj LINKSYS recimo

Probaj spremeniti položaj, daj ga čim višje v prostor

Probaj izklopiti WEP/WPA in omenji dostop z MAC filtrom.

Probaj še z tem free programom

HeatMapper

The World's Most Popular Wi-Fi Mapping Tool. For Free.

Map Wi-Fi coverage.

Discover and locate Wi-Fi radios.

Optimize your Wi-Fi.

See Wi-Fi coverage on a map

Locate all access points

Detect security settings and finds open networks

Free of charge, one-minute install

Supports 802.11n, as well as a/b/g