Moscrack v2.08b - Multifarious On-demand Systems Cracker (cracking WPA keys in parallel on a group of computers)

Moscrack is a perl application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack's new plugin framework, hash cracking has become possible. SHA256/512...

Microsoft Windows XP Wireless Zero Configuration Service Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15008/info WZCSVC is affected by an information disclosure vulnerability. Reportedly, the Pairwise Master Key PMK of the Wi-Fi Protected Access WPA preshared key authentication and the WEP keys of the interface may be...

Unicorn Router WB-3300NR CSRF (Factory Reset/DNS Change)

No description provided by source. Exploit Title: Unicorn Router WB-3300NR CSRF Factory Reset/DNS Change Exploit Author: absane Blog: http://blog.noobroot.com Discovery date: October 29th 2013 Vendor Homepage: http://www.eunicorn.co.kr/kimsboard7/product.php?inc=wb-3300nr Tested on: Unicorn...

UPC Ireland Cisco EPC 2425 Router / Horizon Box

No description provided by source. Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box Google Dork: Date: 11/12/2013 Author: Matt O'Connor / Planit Computing Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf Version: Category: Remote Tested on: Cisco EPC 2425 / Horizon B...

Madwifi < 0.9.2.1 - SIOCGIWSCAN Buffer Overflow

No description provided by source. Madwifi remote kernel exploit 100% reliable, does'nt crash wifi stack, can exploit same target multiple times Julien TINNES julien at cr0.org Laurent BUTTI 0x9090 at gmail.com vuln in giwscancb, here's the path: ieee80211ioctlgiwscan - ieee80211scaniterate -...

Madwifi SIOCGIWSCAN Buffer Overflow

No description provided by source. $Id: madwifigiwscancb.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

openSUSE Security Update : NetworkManager (openSUSE-SU-2012:1151-1)

The broken AdHoc WPA mode was disabled in NetworkManager, which would have created an open network instead. CVE-2012-2736 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-589. The...

USN-2232-2 openssl regression

USN-2232-1 fixed vulnerabilities in OpenSSL. The upstream fix for CVE-2014-0224 caused a regression for certain applications that use tlssessionsecretcb, such as wpasupplicant. This update fixes the problem. Original advisory details: Jüri Aedla discovered that OpenSSL incorrectly handled invalid...

Heartbleed Cupid Wireless Attacks Expose OpenSSL Over WPA

Regardless that the fervor over the Heartbleed OpenSSL vulnerability has died down considerably, patching the bug should remain a top priority for enterprises because researchers continue to find new exploit vectors. The latest takes aim at Heartbleed over wireless networks. A researcher with...

Moscrack - Cluster Cracking Tool For WPA Keys

Moscrack is a PERL application designed to facilitate cracking WPA keys in parallel on a group of computers. This is accomplished by use of either Mosix clustering software, SSH or RSH access to a number of nodes. With Moscrack’s new plugin framework, hash cracking has become possible. SHA256/512...

SNMP Public Community String Zero Day in Routers Disclosed

Researchers have discovered previously unreported problems in SNMP on embedded devices where devices such as secondary market home routers and a popular enterprise-grade load balancer are leaking authentication details in plain text. The data could be extracted by gaining access to the read-only...

Netopia 3347 Cable Modem Wifi Enumeration

This module extracts WEP keys and WPA preshared keys from certain Netopia cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netopia 3347 Cable Modem Wifi Enumeration', 'Description'...

Ubee DDW3611b Cable Modem Wifi Enumeration

This module will extract WEP keys and WPA preshared keys from certain Ubee cable modems. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Descriptio...

Weak firmware encryption and predictable WPA key on Sitecom routers

ADVISORY INFORMATION Title: Weak firmware encryption and predictable WPA key on Sitecom routers Discovery date: 17/02/2014 Release date: 24/04/2014 Credits: Roberto Paleari @rpaleari Alessandro Di Pinto @adipinto Advisory URL: http://blog.emaze.net/2014/04/sitecom-firmware-and-wifi.html AFFECTED...

Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Multiple Vulnerabilities + Date: 21-04-2014 + Category: WebApp + CVE:CVE-2014-2923 CVE-2014-2924 + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

Comtrend CT 5361T Password Disclosure

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

[Router Password Decryptor v2.0] Recover internet login/PPPoE authentication passwords, Wireless WEP keys, WPA/WPA2 Passphrases from your Router/Modem configuration file

Router Password Decryptor is the FREE tool to instantly recover internet login/PPPoE authentication passwords, Wireless WEP keys, WPA/WPA2 Passphrases from your Router/Modem configuration file. Currently it supports password recovery from following type of Routers/Modems Cisco Juniper DLink BSNL ...

[Wireless IDS] Ability to detect suspicious activity such as (WEP/WPA/WPS) attack by sniffing the air for wireless packets

Wireless IDS is an open source tool written in Python and work on Linux environment. This tool will sniff your surrounding air traffic for suspicious activities such as WEP/WPA/WPS attacking packets. It do the following Detect mass deauthentication sent to client / access point which unreasonable...

EE BrightBox Router Vulnerabilities Exposed

Leave it to a software test engineer to be thorough about his home networking gear. Scott Helme, an engineer in the U.K., likes to take a close look at traffic coming and going from new devices installed at his home. Recently, he signed up for fiber service from Everything Everywhere, an ISP in t...

[WiFi Password Decryptor v3.0] Wireless Password Recovery Software

WiFi Password Decryptor is the FREE software to instantly recover Wireless account passwords stored on your system. It automatically recovers all type of Wireless Keys/Passwords WEP/WPA/WPA2 etc stored by Windows Wireless Configuration Manager. For each recovered WiFi account, it displays followi...