Advice Request WiFi security

[Ks84]

how do i test the weakness of my wifi if any and any one stop software to path those?

 

[Arequire]

https://www.avira.com/en/avira-home-guard
This is the only network vulnerability scanner I can think of that doesn't require you to install a full-fledged antivirus.

If you use any of Avast's home products, those include a network vulnerability scanner. Same goes for mid-to-upper tier ESET home products (Internet Security and above). There are probably others that exist but I'm not aware of them.

 

[bribon77]

I don't know if this is what you're looking for.
SoftPerfect WiFi Guard : keep your Wi-Fi network secure

 

[ChemicalB]

Not sure if this may help, but I know this:

"Router Checker is a free web-based tool you can use to check your device's connection to its DNS resolver, to make sure it is connecting to an authorized DNS server. A mismatch between the two may indicate DNS hijacking is underway."

Router Checker | F-Secure Labs

 

[ForgottenSeer 58943]

how do i test the weakness of my wifi if any and any one stop software to path those?

There are some great overall tips in this thread;

Five ways to check if your router is configured securely

 

[Genux]

Don't use the default password keys on your router, change it and save it in your password-manager, so you don't forgot the new logins.

 

[JM Safe]

Hello,

You can use also this (for checking for VPNFilter malware):

VPN Filter checker - Symantec Corp.

 

[MARKRONSON]

hey guys,
thank you all for the solution you provided.. i was also looking for the same.
best regards!!

 

[Kyle_Katarn]

dot11Expert could help : KC Softwares

 

[MARKRONSON]

Thank you all for your responses!! Also you may refer wifi guide to get some more information on this.

 

[notabot]

My shortlist for home WiFi is

• Whitelist MAC addresses of your devices on the home network.
• Use a guest network for guests
• Block printer from connecting to the internet.
• Disable UPnP/ NAT punching
• Change default password for admin
• Change default password for WiFi
• Disable WPS

Add to that updating your WiFi firmware frequently and get a WiFi device which also acts as a UTM ( while it's still meaningful technology to use anyhow ).

If you do the above, you've cut out most common attack vectors, I'd say no need for a scanner, the UTM functionality should already offer that.

 

[bayasdev]

On my Mikrotik router I put guests and unknown tech on a virtual WIFI network bridged to an isolated VLAN (extra enforcement with firewall rules), I only have necessary management ports open on the main VLAN (no DNS caching on the router to reduce attack surface) and no port open from WAN/guest VLAN. For WIFI security I use WPA2 AES Only, no PMKID and no WPS. I prefer to just block ICMP redirect request opossed to blocking the entire protocol on the input chain, blocking ICMP completely can break things and decrease performance.

 

[oldschool]

There is this stand-alone app Bitdefender Home Scanner It will install Bitdefendender Agent and separate Home Scanner.

 

[samjonas]

Thanks a lot for sharing this useful information.