Penetration Testing mailing list archives
Re: Cracking WEP and WPA keys
From: Demetrio Carrión <demetrio.carrion () gmail com>
Date: Fri, 16 Dec 2005 09:50:55 -0200
Hi, The key is not sent to the AP in the clear. The WEP authentication is a challenge-response protocol. 1. The AP sends a 128bit number (challenge) 2. The client/user encrypts the challenge with the WEP key (Challenge XOR Key) 3. The AP compares the client response against the expected response. 4. The AP sends an ACK or NACK response You can brute force the response, since you have the challenge and might end up discovering the key. You don't need to set up a fake AP to carry out this type of attack, although. Regards, Demetrio Carrión On 12/14/05, pagvac <unknown.pentester () gmail com> wrote:
Would the following attack be feasible for obtaining a WEP key? Set up an AP with VERY strong signal and same SSID as the one used by the target network. After that, the client should be able to attempt to connect to your AP (you send stronger signal than the legitimate one) and send you the WEP which you could sniff from the AP itself. After that you're done and the key is yours. Am I talking non-sense here? Wouldn't the WEP key be sent to the AP in the *clear* at the beginning of the handshake? Otherwise how can the AP check whether or not the client is using the right key? I've never tested this and my assumptions might be based on incomplete and inaccurate knowledge about how wi-fi technologies. ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
-- Demetrio de Souza Diaz Carrión Mestrando em Redes de Computadores COPPE/UFRJ Engenheiro Eletrônico UFRJ ------------------------------------------------------------------------------ Audit your website security with Acunetix Web Vulnerability Scanner: Hackers are concentrating their efforts on attacking applications on your website. Up to 75% of cyber attacks are launched on shopping carts, forms, login pages, dynamic content etc. Firewalls, SSL and locked-down servers are futile against web application hacking. Check your website for vulnerabilities to SQL injection, Cross site scripting and other web attacks before hackers do! Download Trial at: http://www.securityfocus.com/sponsor/pen-test_050831 -------------------------------------------------------------------------------
Current thread:
- RE: Cracking WEP and WPA keys, (continued)
- RE: Cracking WEP and WPA keys Shenk, Jerry A (Dec 13)
- Re: Cracking WEP and WPA keys Alvin Oga (Dec 13)
- Re: Cracking WEP and WPA keys Seth Fogie (Dec 13)
- RE: Cracking WEP and WPA keys cerealkilla (Dec 15)
- RE: Cracking WEP and WPA keys Sahir Hidayatullah (Dec 16)
- RE: Cracking WEP and WPA keys Josh Perrymon (Dec 13)
- Re: Cracking WEP and WPA keys pagvac (Dec 14)
- Radio Signal Pent test (RFID) Louie (Dec 14)
- Re: Radio Signal Pent test (RFID) Toufeeq Hussain (Dec 27)
- Re: Cracking WEP and WPA keys David M. Zendzian (Dec 14)
- Re: Cracking WEP and WPA keys Demetrio Carrión (Dec 16)
- RE: Cracking WEP and WPA keys Rui Pereira (WCG) (Dec 16)
- Re: Cracking WEP and WPA keys Cedric Blancher (Dec 16)
- Re: Cracking WEP and WPA keys Matthias.Vallentin (Dec 16)
- Radio Signal Pent test (RFID) Louie (Dec 14)
- Re: Cracking WEP and WPA keys Robert Baldi (Dec 14)
- Cracking WEP and WPA keys Eduardo Espina (Dec 14)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 14)
- Re: Cracking WEP and WPA keys Robin Wood (Dec 15)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 17)
- Re: Cracking WEP and WPA keys Fabien Degouet (Dec 14)
- RE: Cracking WEP and WPA keys Shenk, Jerry A (Dec 13)
- RE: Cracking WEP and WPA keys Hamlesh Motah (Dec 14)
- RE: Cracking WEP and WPA keys Rapaille Maxime (Dec 17)