Cracking WPA networks with MacRuby
knoopx.net
Cracking WPA networks with MacRuby
1–10 of 18 posts
Re: Cracking WPA networks with MacRuby
#2Correct me if I'm wrong, but this isn't a brute force attack, its a dictionary attack. A brute force attack would go through every iterattion, like 00001, 00002...
Re: Cracking WPA networks with MacRuby
#3Correct me if I'm wrong, but this isn't a brute force attack, its a dictionary attack. A brute force attack would go through every iterattion, like 00001, 00002...
Not only that but it's a contrived example where he only picked a password that he knew would match one of the small 256 static list used. It's like setting a variable to a value and then searching an array for that value, knowing it's in there.
Re: Cracking WPA networks with MacRuby
#4I've been wondering why know one hasn't written an application yet that breaks into a W-Lan Network as an alternative to typing in a password.
Obviously there are some legal considerations in certain countries regarding development, possession and usage of such an application but the risk seems to be rather small if you restrict network services, change the MAC and use End-to-End encryption. Besides you might even get away with calling it a tool for penetration tests.
Re: Cracking WPA networks with MacRuby
#5Correct me if I'm wrong, but this isn't a brute force attack, its a dictionary attack. A brute force attack would go through every iterattion, like 00001, 00002...
true, it's a dictionary attack.
keys = File.read("./dictionary.txt").lines.to_a.reverseRe: Cracking WPA networks with MacRuby
#6What are the 256 keys the author cycled through? Does WPA only have 256 possible keys?
Re: Cracking WPA networks with MacRuby
#7What are the 256 keys the author cycled through? Does WPA only have 256 possible keys?
WPA does not only have 256 keys.
The author decided to show that if he knew all but one character of his network password, he could bruteforce the missing character. To that end, he took all 256 possibilities for that character, and computed the resulting keys. Then tried connecting with those keys.
This shows a connection rate of 30 attempts/2 minutes which is 0.25/second. That is not practical for most attacks.
Re: Cracking WPA networks with MacRuby
#8How is this news? Connecting to a WPA protected AP to brute force a single character (256 times) isn't particularly impressive or useful. The speed at which the connects happen still make this impractical for large-scale attacks (or, attacks on an entire keyphrase).
Re: Cracking WPA networks with MacRuby
#9Great demo of a new MacRuby API, not so great demo of cracking a wireless network.
Re: Cracking WPA networks with MacRuby
#10As a followup we will demonstrate that technically advanced attacks on the ssh protocol are unnecessary when we are breaking in to a predetermined account with the password 'aardvark'.