4 ms·
Craig is so damn smart. I love how he went in looking to exploit some format string vulnerability, or an incorrect escaping of arguments passed to system(). But
by Moral_ 12y ago
Craig is so damn smart. I love how he went in looking to exploit some format string vulnerability, or an incorrect escaping of arguments passed to system(). But came out with a way to systematically grab WPA/2 keys from D-link.
Why would D-link roll their own WPS key generation scheme? All the in-home routers i've seen come with the WPS pin set in NVRAM and written on the bottom of the router.
- cnvogel 12y ago> All the in-home routers i've seen come with the WPS pin set in NVRAM and written on the bottom of the router. Well... I'd guess that this D-Link router also has a sticker with the WPS pin on it. So that means that the same (stupid, predictable) algorithm is used in the factory for printing the labels. Also: Even for the devices which have the PIN stored separately in the NVRAM there's no guarantee that some stupid/lazy guy didn't just copy the algorithm for label-printing used for the former devices, to generate the NVRAM-PINs for the latter ones.
- eli 12y agoI think those labels are usually put there by the ISP who sold/leased you the device, not the manufacturer.
- coreyja 12y agoI disagree, only because all the routers I bought recently haven't come from my ISP, bought on Amazon, and they all have these stickers on them.