Search Results
|
Post |
Author |
Forum |
Replies |
Views
[asc]
|
Posted |
|
|
Thread: New attack on WPA/WPA2 using PMKID
Post: RE: New attack on WPA/WPA2 using PMKID
Great work and thank you to all those involved! |
|
soxrok2212 |
User Contributions
|
187 |
1,293,328 |
08-05-2018, 07:21 PM |
|
|
Thread: New attack on WPA/WPA2 using PMKID
Post: RE: New attack on WPA/WPA2 using PMKID
A quick note about 802.11r... the new trend is "mesh" networking. Lots of homes are popping up with 2-3 APs all linked together so I guess it kinda does make sense. And I guess vendors would want to h... |
|
soxrok2212 |
User Contributions
|
187 |
1,293,328 |
08-11-2018, 08:46 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
mrfancypants Wrote: (06-06-2017, 05:59 AM)
--
P.S. In case anyone ever wants to pick up where I left off, here are some pointers.
Firmwares are at https://68.250.244.11/firmware/, the web site may be ... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-07-2017, 12:21 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I grabbed a few copies before they were removed. Unfortunately I don't have much time to work with this, but where did you get the firmware? Btw, you can try firmware mod kit to extract the binaries i... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-10-2017, 05:33 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I'll see if I can find time to look at it tonight. Have been working like a dog lately. |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-16-2017, 02:06 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
Update: I'm a exhausted tonight so it may have to wait until the weekend... keep me motivated! |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-16-2017, 04:09 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I have the firmwares extracted and file systems mounted, but only /bin is populated. There are just common linux binaries. In the past, the only relevant binaries I've found were in /lib which is empt... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-17-2017, 05:13 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I have an NVG589 on the way, got it for $15 :) |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-17-2017, 09:26 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I downloaded the firmwares from that link and extracted them manually, then mounted the jffs2 image and pulled everything off. Maybe I needed root to pull off the other directories... who knows, but I... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-19-2017, 11:57 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
Pardon me if I sound ignorant, but looking through the source code will get you nowhere. Any half decent manufacturer will remove code used to generate "secret" values. This is where disassembling com... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-21-2017, 01:00 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
No manufacturer pinouts on the 589 board, I'll have to test some of the pinouts and see if I can find a JTAG/UART interface up. |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-26-2017, 11:17 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
fart-box Wrote: (07-06-2017, 10:50 PM)
--
I agree about the 'l'. It seems to be too seldom used.
I've been trying to convert those magic numbers your code generates into some form of seed to build... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-07-2017, 01:29 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
mrfancypants Wrote: (06-21-2017, 08:32 AM)
--
I would expect the algorithm to be basically similar between 589s and older models, just with more obfuscation. If we could figure out how the WPA key wa... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
06-21-2017, 02:18 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
mrfancypants Wrote: (07-09-2017, 10:40 AM)
--
Alpha version of the keygen for NVG589:
Code:
--
pw_charset='abcdefghijkmnpqrstuvwxyz23456789#%+=?'
def pwgen589(x):
x=int(x*465661287.5245797... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-09-2017, 09:33 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-10-2017, 02:15 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
mrfancypants Wrote: (07-10-2017, 02:37 AM)
--
That's a 599-type password (my previous code snippet) (some 589s have these) and the complete password should be b=+#gc5qr9gt
https://repl.it/JMbi/4
--
... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-10-2017, 11:36 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I have written the NVG589 code in C with help from a friend. I have not tested performance with hashcat yet, but you should be able to pipe directly in. https://github.com/soxrok2212/PSKracker/blob/ma... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-11-2017, 05:38 PM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
Did you test the python or C code? |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-12-2017, 03:54 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
I will work on the 599 code when I get more time. Not sure of ATTxxxx |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-13-2017, 03:36 AM |
|
|
Thread: Keyspace List for WPA on Default Routers
Post: RE: Keyspace List for WPA on Default Routers
gcc att.c to build, then ./a.out to run. Will take a good amount of time to generate all possibilities but you should be able to pipe directly into hashcat if I'm not mistaken. Haven't actually tested... |
|
soxrok2212 |
User Contributions
|
182 |
305,385 |
07-13-2017, 11:08 PM |