Collaborate Disseminate
Our team was hired for a red team engagement for a client. A part of the engagement is attempting to crack the WiFi passwords of their office APs. However, we obviously want to stay undetected. What kind of thing should we watch out for? A… Continue reading How can wireless password cracking be detected?
In my free time I go in for pen testing and wireless security using my 2018 MacBook Pro. I have been trying to capture 4-way WPA handshake using 3 various tools: airport command, tcpdump and Apple’s native Sniffer under Wireless Diagnostic… Continue reading Cannot capture WPA handshake on macOS by any means
This question already has an answer here:
Hashcat custom mask – brute force 12 length passwords with 1 capital letter, 1 number and 10 lowercase letters
1 answer
… Continue reading How can I crack WPA2 hash with some limitations? [duplicate]
I designed a WiFi host whose password contains a truncated SHA256 hash of a password + the time it was set.
For example, “password2019-12-25-12:59” hashed to “acd2775f” which is
truncated to 8 digits (by the way, not th… Continue reading What level of vulnerability has this WPA2 system?
Is it possible to implement a key reinstallation attack (or detect if a client is vulnerable) with already existing tools (e.g. wireshark, airmon etc), if so how can it be done?
I think I could replicate the original Access … Continue reading Replicate a Key reinstallation attack without the official script
When stealing a WPA2 hash from a packet, why do you need to use brute force to find out the original password instead of just sending the router the hash itself and connect with it to the router?
Continue reading Connect with a WPA2 hash instead of cracking it
A router (or one spoofing as a router) unilaterally sent to a client an EAPOL packet 1 of 4, and then immediately sent 5 packets of EAPOL packet 3 of 4.
Is this the signature of a KRACK attack? And if so, how would I know if… Continue reading Is this the signature of a KRACK attack?
I can confirm an intrusion from an unknown MAC address (identified as a Realtek device), getting a new, valid IP from the DHCP pool, and using the network for roughly 1 hour.
The network is WPA2 – 1 each for 2.4Ghz and 5Ghz … Continue reading How could a WPA2 WiFi with a 40+ character random password have been penetrated
With all the recent vulnerabilities in WPA2 and so many low quality posts/articles in the internet about WPA2 security I am not being able to fully understand the risks of WPA2.
Is WPA2 Personal secure provided that strong p… Continue reading Is WPA2 TKIP+AES with WPS disabled and strong keys secure? What about WPA2 Enterprise against a RADIUS server?
Wireless Protected Access, Version 2 (WPA2) is the version of Wi-Fi security used in most cases today. This diagram illustrates the general layout of the security data used by WPA2. There’s a new version coming out, WPA3, but it doesn’t see… Continue reading WPA2 Packet Frame Format