PT-2017-2943

Name of the Vulnerable Software and Affected Versions WPA2 affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within the Wi-Fi network's range can exploit this to access encrypt...

PT-2017-2942

Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified Description The issue is related to the Wi-Fi Protected Access WPA and WPA2 protocol, which supports IEEE 802.11w. It allows the reinstallation of the Integrity Group Temporal Key IGTK during the...

PT-2017-2940

Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified Description The issue is related to the management of cryptographic keys in the WPA2 protocol, which secures Wi-Fi networks. It allows an attacker within radio range to exploit the vulnerability by...

PT-2017-2944

Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi wireless networks. An attacker within the Wi-Fi network's range can exploit this...

PT-2017-2945

Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within radio range can exploit this to access encrypted...

PT-2017-2947

Name of the Vulnerable Software and Affected Versions WPA and WPA2 versions affected versions not specified Description The issue is related to Wi-Fi Protected Access WPA and WPA2 that support 802.11v, allowing reinstallation of the Integrity Group Temporal Key IGTK when processing a Wireless...

PT-2017-2939

Name of the Vulnerable Software and Affected Versions WPA and WPA2 affected versions not specified FortiOS affected versions not specified Description The issue is related to errors in cryptographic key management in the WPA2 protocol, which secures Wi-Fi networks. An attacker within radio range...

Man-in-the-middle Router

Turn any linux computer into a public Wi-Fi network that silently mitms all http traffic. Runs inside a Docker container using hostapd , dnsmasq , and mitmproxy to create a open honeypot wireless network named “Public”. For added fun, change the network name to “xfinitywifi” to autoconnect anyone...

Targeted WPA2-Enterprise Evil Twin Attacks: eaphammer

Targeted WPA2-Enterprise Evil Twin Attacks EAPHammer is a toolkit for performing targeted evil twin attacks against WPA2-Enterprise networks. It is designed to be used in full scope wireless assessments and red team engagements. As such, focus is placed on providing an easy-to-use interface that...

CVE-2017-7398

D-Link DIR-615 HW: T1 FW:20.09 is vulnerable to Cross-Site Request Forgery CSRF vulnerability. This enables an attacker to perform an unwanted action on a wireless router for which the user/admin is currently authenticated, as demonstrated by changing the Security option from WPA2 to None, or...

Authentication flaw

The Soft Access Point AP feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack...

CVE-2015-5729

The Soft Access Point AP feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack...

CVE-2015-5729

The CVE-2015-5729 entry describes a vulnerability in Samsung Smart TVs (models X10P, X12, X14H, X14J, NT14U) and Xpress M288OFW printers where the Soft Access Point WPA2-PSK keys are weak and can be brute-forced, enabling an attacker to obtain sensitive information or bypass authentication over a...

CVE-2015-5729: Exposure of Sensitive Information to an Unauthorized Actor

The Soft Access Point AP feature in Samsung Smart TVs X10P, X12, X14H, X14J, and NT14U and Xpress M288OFW printers generate weak WPA2 PSK keys, which makes it easier for remote attackers to obtain sensitive information or bypass authentication via a brute-force attack...

PT-2017-6887

Name of the Vulnerable Software and Affected Versions Samsung Smart TVs versions X10P, X12, X14H, X14J, and NT14U Samsung Xpress M288OFW printers affected versions not specified Description The issue allows remote attackers to obtain sensitive information or bypass authentication via a brute-forc...

How To Stop Larry From Hacking Your WiFi in 2017

It’s 2017, and we’re not any further along with Wi-Fi security than we were 10 years ago. There are Intrusion Detection Systems and 2nd generation antivirus apps to protect us from some vulnerabilities but the simple fact that some people and businesses still don’t set their network up well in th...

Fluxion 0.23 - WPA/WPA2 Security Hacked Without Brute Force

Fluxion is a remake of linset by vk496 with hopefully less bugs and more functionality. It's compatible with the latest release of Kali rolling. Latest builds stable and beta can be found here here . If you're new, or just don't understand much about the project, have a look at the wiki . The...

Fluxion - WPA/WPA2 Security Hacked Without Brute Force

Fluxion is a remake of linset by vk496 with less bugs and more features. It's compatible with the latest release of Kali Rolling. Latest builds stable and beta HERE . If you new, please start reading the wiki Fluxion GUI How it works Scan the networks. Capture a handshake can't be used without a...

WPA WPA2 Phishing Tool: Linset

WPA WPA2 Phishing Tool: Linset Linset Is Not a Social Enginering Tool To run linset in Kali-linux, only two2 additional programs are requiredrqr. They are lighttpd and php5-cgi. apt-get install lighttpd apt-get install php5-cgi After you unzip the download, place the linset folder found in the...

Number of Devices Sharing Private Crypto Keys Up Sharply

Researchers at SEC Consult say the number of internet gateways, routers, modems and other embedded devices sharing cryptographic keys and certificates is up 40 percent since the Austrian consulting firm first looked at the problem in November. The report, posted Tuesday called “House of Keys,”...