Взлом и уязвимости маршрутизаторов и Wi-Fi

Уровень 0 · материалов: 5

В кластер входят документы, описывающие методы компрометации беспроводных сетей и сетевого оборудования, но не входят документы о взломе GSM-шифрования мобильной связи.

Общие признаки: уязвимости роутеров, атаки на Wi-Fi, брутфорс паролей, безопасность WPS и WPA2, перехват учетных данных PPPoE

Группа выше: Безопасность Wi-Fi и публичных сетей

Материалы

• #33577 — Analysis of WPS Pixie Dust Wi-Fi Attack — Представитель этого кластера

  WPS Pixie Dust Attack — Взлом Wi-Fi сети за 5 минут. Описание уязвимости — ganjar

  Смысл: The main idea is to explain how predictable random number generation in various router chipsets allows attackers to bypass WPS security and crack Wi-Fi passwords quickly via the Pixie Dust attack.

  The WPS Pixie Dust attack exploits weak random number generation in routers to crack Wi-Fi PINs in minutes using offline brute-forcing.

• #7109 — Bruteforcing Wi-Fi WPS Pins Using C#

  Брутфорс соседского Wi-Fi (в исключительно исследовательских целях) — mikelieber

  Смысл: The main idea is to demonstrate the vulnerability of WPS-enabled routers to brute-force attacks by building a basic tool in C#, while emphasizing that such attacks are practically inefficient and legally dangerous.

  A technical walkthrough on creating a C# program to brute-force Wi-Fi WPS PINs using the Native WiFi API, primarily as a security research exercise.

• #17023 — Critical WPA2 Vulnerabilities: The KRACK Attack Explained

  Обнаружены критичные уязвимости в протоколе WPA2 — Key Reinstallation Attacks (KRACK) — LukaSafonov

  Смысл: The text informs the reader about the discovery of a critical vulnerability in the WPA2 Wi-Fi security protocol known as KRACK. It explains that this flaw allows attackers to decrypt traffic and potentially inject data, affecting almost all modern wireless devices regardless of the OS.

  The KRACK attack exposes a fundamental flaw in the WPA2 protocol, allowing attackers to decrypt Wi-Fi traffic across nearly all modern devices.

• #8956 — Cracking Router Admin Panels Using Hydra

  Взлом «админки» роутера — Hrodvitnir

  Смысл: The main idea is to demonstrate how to use the Hydra tool to perform brute-force attacks on router administration panels by identifying the specific authentication method (GET vs POST) and tailoring the tool's parameters accordingly.

  A technical guide on using Hydra to brute-force router admin passwords through either simple HTTP-GET or complex HTTP-POST-FORM methods.

• #25620 — Recovering PPPoE Credentials Using a Mikrotik Router

  Узнать логин-пароль установленные на PPPoE в роутере — arxont

  Смысл: The text describes a technical method to retrieve a PPPoE login and password from a router when admin access is unavailable, by using a secondary device as a PPPoE server to capture plain-text credentials.

  A technical guide on capturing plain-text PPPoE passwords by setting up a rogue PPPoE server on a Mikrotik router.