New Wi-Fi Attacks

wifi-hack.jpg

A properly configured WPA2 network with a complex password is considered relatively secure - especially when you start adding central authentication and access control. A new attack against WPA2 may prove to change that, and urge to see WPA3 rolled out sooner than later: https://www.theregister.co.uk/2018/08/06/wpa2_wifi_pmkid_hashcat/

The new attack, discovered by the authors of hashcat, allows attackers to pull crackable versions of the password from standard network packets instead of requiring a 4-way handshake (network device login) to occur. This attack relies on networks with RSN IE (Robust Security Network Information Element) enabled, and of course requires you to directly interact with the wireless router.


This means cracking WPA2 networks in certain circumstances just got a lot easier. See https://hashcat.net/forum/thread-7717.html for the authors post and tools.

Steven Ly