5 ms·
Further technical details and quotes from the paper are available at: http://www.securityweek.com/researchers-outline-how-crack-wpa2-security http://www.securit
by dhx 13y ago
Further technical details and quotes from the paper are available at:
http://www.securityweek.com/researchers-outline-how-crack-wpa2-security http://www.securityweek.com/researchers-outline-how-crack-wp...
The methodology appears to be as naive as a brute force attack against the Pre-Shared Key (PSK):
"At the beginning, the area was scanned-sniffed with ‘Airodump’ and then a deauthentication attack was made with ‘Aireplay’," according to the paper. "Through that, an instance of the PSK was caught. Finally, ‘Aircrack’ was attempting to reveal the secret password by using the instance of the PSK and matching it with every record of the dictionary. For these experiments we used a very big dictionary that consisted of 666,696 standard printable ASCII character records of various lengths. ‘Airodump’ and ‘Aireplay’ are commands of the ‘Aircrack’ suite, responsible for sniffing and deauthentication respectively."
Which part of this paper is new or novel?
- timdorr 13y agoI'm confused. They downloaded aircrack-ng and wrote a paper about it? How is this news?
- ckozlowski 13y agoAs some others pointed out, the title is very alarming and misleading. "cracked", to us, means "has a flaw, i.e. broken." If it were true, it would be very big news. Fortunately, this is far from the case.
- antocv 13y agoIve seen similar "papers" on BCompSc degrees.
- dmayer 13y agoI'd assume that if this were an actual break-through result it would be published in a reputable academic conference and not a random journal..
- ds9 13y agoNot that alone. They show that that is "practical", which may be semi-new, but the main trick: " it is the de-authentication step in the wireless setup that represents a much more accessible entry point for an intruder with the appropriate hacking tools. As part of their purported security protocols routers using WPA2 must reconnect and re-authenticate devices periodically and share a new key each time. The team points out that the de-authentication step essentially leaves a backdoor unlocked albeit temporarily."
- ckozlowski 13y agoI take offence to their statement "leaves a backdoor unlocked". It's no such thing. The de-auth step merely saves you the time of having to wait for the client/ap to renegotiate on their own. Even if your de-auth step is successful, you still have to conduct a brute force against the handshake you captured. Nothing, at any time, is unlocked.
- espressopowered 13y agoEasy way of driving traffic to a website; disappointing that it's just a long paper on aircrack.
- sspiff 13y agoExactly. We've known that WPA2-PSK was vulnerable to dictionary attacks since before it was even popular. Also, a ~700k password dictionary is not what I would describe as "very big". This still won't crack my wireless, nor many of the wireless networks I've used that have relatively easily predictable passwords.