Collaborate Disseminate
The author of the key reinstallation attack released scripts on Github to test AP and clients.
To test the clients, you have to connect to a fake AP but you still need to know the pre-shared key. Of course you know the password, because y… Continue reading Key reinstallation attack how does it work without a pre-shared key?
Let’s assume that one client contains malware, and that it belongs to a Wi-Fi network protected with WPA2/Personal (hence, via a password known to the piece of malware), where some other vulnerable clients are present.
I can… Continue reading Can a rogue client bypass the Wi-Fi Access Point?
WPA2 PSK is used to encrypt packets to and from a router. All the members on the network have the wifi password, so theoritically if one of them is untrustable they could be able to capture and decrypt packets from my machine… Continue reading How to protect your wifi traffic from sniffing if untrusted people know the password?
as i know pmk is:
PMK = PBKDF2-SHA1(PSK, ESSID, 4096)
and it can be generate easly if you have the essid
but how can i check the pmk with pmkid?
does pmk == pmkid ??
i thought about generating a pmkid to check
but whil… Continue reading Is it possible to generate a PMK reverse lookup tables
From the following answer, I understand a strong pre-shared key must be 15 characters at minimum and randomly generated:
https://security.stackexchange.com/a/56646/37051
However, from other reading, I understand that crypto… Continue reading Details of a good WPA2 pre-shared key (password)?
I understand some of the reasons why WPA Enterprise is more secure from this question: Why is WPA Enterprise more secure than WPA2?
However, given a home network with only one single user where that user has a long and compl… Continue reading Will WPA Enterprise give any advantage on home network with one user?
I created a small program with runs command:
tshark -i2 -o wlan.enable_decryption:TRUE -o “uat:80211_keys:\”wpa-pwd\”,\” Passphrase:SSID\”” -w test.pcapng
This creates the file test.pcapng, but it is not decrypted. I know … Continue reading Save decrypted pcap or decrypt on reading with rdpcap
Apparently, the open source router firmware OpenWrt has the option to isolate client traffic. I imagine this is simply a firewall rule which prevents individual IPs on the LAN from communicating with each other. On the face o… Continue reading Threat model for the OpenWrt client isolation feature
A great number of attack methods for WPA2 involve getting a handshake capture. To capture one the fastest way involves sending deauthentication packets to the client forcing him to initiate the handshake while you capture the… Continue reading Why WPA2 Client Devices Respond to Any Deauths
In regards to PSK, a salt (the SSID) is used as part of the four-way handshake.
PSK = PBKDF2(PassPhrase, ssid, ssidLength, 4096, 256)
Would it not be more secure requiring users input a second “password”, which would act … Continue reading Wi-Fi – Proposal for stronger OpSec with PSK