Crack WPA on the cloud • Hacker News Board

Re: Crack WPA on the cloud

#21

Post by [deleted] » Wed, Feb 15, 2012, 3:43 AM UTC

windexh8er wrote: post #10

peterwwillis wrote: post #4

Unfortunately pentesters can't send their capture files to third parties, so this has limited uses.

Why not? A WPA handshake can be considered public information. Connecting to that particular ESSID yields all that's needed to brute force WPA and would be considered external. There's no limitations this presents to pen testers. However, for $17 this is a relatively small dictionary set. Based on what we use for real world pen testing we have just shy of 1 billion unique words / phrases.

[deleted]

Re: Crack WPA on the cloud

#22

Post by dfc » Wed, Feb 15, 2012, 3:56 AM UTC

What pentest team does not have this capability inhouse?

Re: Crack WPA on the cloud

#23

Post by jasonzemos » Wed, Feb 15, 2012, 4:38 AM UTC

I <3 Moxie Marlinspike and all of his work. It's great to see this project is alive and well again.

Re: Crack WPA on the cloud

#24

Post by icarus_drowning » Wed, Feb 15, 2012, 5:23 AM UTC

catch23 wrote: post #16

cypherpunks01 wrote: post #13

And if you lose your important WPA key and can't recover it via dictionary attack, there's always reaver-wps: http://code.google.com/p/reaver-wps/

only if they have wps enabled...

A depressingly large number of recently manufactured routers do, and it is on by default by mandate of the WiFi alliance. If the router is Cisco/Linksys, in many instances you can't disable it, at least as I understand it.

Re: Crack WPA on the cloud

#25

Post by AndyKelley » Wed, Feb 15, 2012, 6:11 AM UTC

icebraining wrote: post #6

mattmaroon wrote: post #3

I love how they quoted Hacker News, as if Hacker News is some sort of editorial team.

It was actually tptacek: http://news.ycombinator.com/item?id=982197

If so, they misquoted tptacek.

Re: Crack WPA on the cloud

#26

Post by csomar » Wed, Feb 15, 2012, 7:14 AM UTC

I don't have any knowledge in Wireless networks. Any idea how to use that? Where do I get the handshake file and ESSID?

Re: Crack WPA on the cloud

#27

Post by organico » Wed, Feb 15, 2012, 7:35 AM UTC

kevs wrote: post #7

I'm not sure what they're using but if I recall from when this has come up before Amazon's EC2 ToS prohibits this usasge.

Which part of the ToS are you referring to?

Re: Crack WPA on the cloud

#28

Post by nodata » Wed, Feb 15, 2012, 7:54 AM UTC

I'd like to see prices for both WPA and WPA2 encryption.

Re: Crack WPA on the cloud

#29

Post by philjohn » Wed, Feb 15, 2012, 9:13 AM UTC

It's times like these I'm glad my WPA password is 63 characters long. It's easy for me to remember though as it's a long sentence. Bit of a pain when setting stuff like Apple TV up though :/

Re: Crack WPA on the cloud

#30

Post by peterwwillis » Thu, Feb 16, 2012, 6:06 PM UTC

windexh8er wrote: post #10

peterwwillis wrote: post #4

Unfortunately pentesters can't send their capture files to third parties, so this has limited uses.

Why not? A WPA handshake can be considered public information. Connecting to that particular ESSID yields all that's needed to brute force WPA and would be considered external. There's no limitations this presents to pen testers. However, for $17 this is a relatively small dictionary set. Based on what we use for real world pen testing we have just shy of 1 billion unique words / phrases.

Technically it's public but you need to be responsible with how you deal with your client's data. Even if the NDA says nothing about releasing handshake details, you still have to explain to your client why a WPA-cracking website has details about their infrastructure.

I agree the convenience is attractive but I wouldn't want to put myself in that position.