Crack WPA in 10 Hours or Less: WPS Vulnerability

Searching_ _ _ · Dec 29, 2011

A researcher has found design flaws and poor implementation in WPS (Wi-Fi Protected Setup) which makes it much simpler to brute force the protection on Wi-Fi access points that use the technology. The discovery has prompted the US CERT to issue an advisory which suggests disabling WPS as a workaround for the problem.

It is the last of these connections, known as "external registrar" or wps_reg, makes the process vulnerable to brute force attacks as it does not require any authentication.

Independently, another researcher, Craig Heffner had been looking into the same vulnerabilities and, after Viehböck's publication of his paper, he announced the availability of Reaver, his own WPS brute-force tool as a GPLv2 licensed, limited functionality open source version and as an enhanced commercial version.
Click to expand...

WPS Vulnerability

Current attacks against WPA networks involve the computation of rainbow tables based on a dictionary of potential keys and the name (SSID) of the network being attacked. Rainbow tables must be re-generated for each network encountered and are only successful if the PSK is a dictionary word. However, Reaver is not restricted by the limitations of traditional dictionary-based attacks. Reaver is able to extract the WPA PSK from the access point within 4 - 10 hours and roughly 95% of modern consumer-grade access points ship with WPS enabled by default.
Click to expand...

Reaver
Cracking WPA in 10 Hours or Less - /dev/ttyS0

Cudni · Dec 29, 2011

Thanks. Also see
https://www.wilderssecurity.com/showthread.php?t=315060

Log in or Sign up

Crack WPA in 10 Hours or Less: WPS Vulnerability

Searching_ _ _ Registered Member

Cudni Global Moderator

Log in or Sign up

Crack WPA in 10 Hours or Less: WPS Vulnerability

Searching_ _ _ Registered Member

Cudni Global Moderator

Useful Searches