Contents
Is it safe to connect to hotel Wi-Fi?
As with airport Wi-Fi, hotel Wi-Fi hotspots are not always secure — even with a password. When checking in, be sure to get the official name of the hotel’s Wi-Fi. Even then, you should still be cautious about using the hotel Wi-Fi, unless you have a VPN to help protect your search history and personal information.
What does it mean to inject JavaScript?
JavaScript injection is a process by which we can insert and use our own JavaScript code in a page, either by entering the code into the address bar, or by finding an XSS vulnerability in a website. This is because JavaScript is a “client-side” language.
How can I make my hotel Wi-Fi secure?
- Ask the hotel what sort of networking it uses.
- Install a firewall on your laptop.
- Avoid sending sensitive data such as bank and credit card information over the hotel connection.
- Change your passwords before your trip, and again when you arrive home.
- Protect your computer as well as your data.
Can’t connect to VPN on hotel WiFi?
You can disguise your VPN traffic as regular web browser traffic, which makes it impossible for the hotel’s network to block your VPN service. To do this, you need to set OpenVPN on port 443. This port is usually used for SSL/TLS encrypted web traffic.
How can I use JavaScript to access my WiFi?
The first malicious JavaScript is pretty simple, it just has to append an iframe. The second malicious JavaScript is a little bit trickier as it has to perform multiple HTTP requests to brute-force the login, access the page with the Wi-Fi password and send it back to the attacker. The important parameters here are:
How is JavaScript used to steal wifi password?
When the client disconnects from the fake access point and reconnects back to, say, its home routers, the malicious JavaScript code activates, steals the Wi-Fi password from the router and send it back to the attacker. Pretty straightforward, right? In order to achieve this result I had to figure out these three things:
What does dribble do to a WiFi access point?
Dribble creates a fake Wi-Fi access point and waits for clients to connect to it. When clients connect, dribble intercepts every HTTP requests performed to JavaScript pages and injects in the responses a malicious JavaScript code.