r00kie-kr00kie

r00kie-kr00kie 免责声明 此项目是 CVE-2019-15126 kr00k 漏洞的概念验证（PoC）利用程序。 本项目仅供教育目的使用，不得用于违法行为或谋取私利。 项目作者不对材料可能造成的任何损害负责。 环境要求 要使用这些脚本，您需要一个支持主动监控模式并能够注入帧的无线网卡。我们推荐使用 Atheros AR9280 芯片（IEEE 802.11n），我们正是基于此芯片开发和测试代码的。 本 PoC 已在 Kali Linux 上测试通过。 安装 root@kitploit: 克隆主仓库 git clone...

r00kie-kr00kie

r00kie-kr00kie Disclaimer This is a PoC exploit for the CVE-2019-15126 kr00k vulnerability. This project is intended for educational purposes only and cannot be used for law violation or personal gain. The author of this project is not responsible for any possible harm caused by the materials...

kr00ker

kr00ker 描述 该脚本是一个利用 KR00K 漏洞（CVE-2019-15126）的简单实验，可以解密易受攻击设备（接入点或客户端）中的部分 WPA2 CCMP 数据。 更具体地说，该脚本尝试在已知以下信息的情况下恢复 WPA2 CCMP 数据包的解密数据： TK（128 位全零） Nonce（在数据包头中以明文发送） 加密数据 其中： WPA2 AES-CCMP 解密 -- AESNonce,TK XOR Encrypted Data = Decrypted Data 解密数据流以 "\xaa\xaa\x03\x00\x00\x00" 开头 Nonce（104 位）=...

kr00k

kr00k PoC of CVE-2019-15126 kr00k vulnerability Installation root@kitploit: apt-get install aircrack-ng pip install -r requirements.txt Disclaimer Usage usage: kr00k.py -h -i INTERFACE -t VICTIM -v VERBOSE -c CHANNEL -w WRITETO -r READ --bssid BSSID root@kitploit: optional arguments: -i INTERFACE...

Huawei Data Communication: Information Disclosure Vulnerability (huawei-sa-20200527-01-wifi-en, Kr00k)

Huawei Data Communication devices are prone to an information disclosure vulnerability dubbed Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

openSUSE: Security Advisory for kernel-firmware (openSUSE-SU-2021:1648-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE: Security Advisory (SUSE-SU-2021:4200-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:4201-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for kernel-firmware (low)

openSUSE Security Update: Security update for kernel-firmware Announcement ID: openSUSE-SU-2021:1648-1 Rating: low References: 1167162 Cross-References: CVE-2019-15126 CVSS scores: CVE-2019-15126 NVD : 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2019-15126 SUSE: 3.1...

OPENSUSE-SU-2021:1648-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug bsc1167162. This update was imported from the SUSE:SLE-15-SP1:Update update project...

SUSE-SU-2021:4201-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug bsc1167162...

SUSE-SU-2021:4200-1 Security update for kernel-firmware

This update for kernel-firmware fixes the following issues: - CVE-2019-15126: Updated Broadcom firmware to fix Kr00k bug bsc1167162...

Kr00k vulnerability (CVE-2019-15126) in Broadcom and Cypress Wi-Fi chips

During the RSA conference of February 26th 2020, researchers Štefan Svorencík and Robert Lipovsky disclosed a vulnerability in the implementation of the wireless egress packet processing of certain Broadcom Wi-Fi chipsets. This vulnerability is referenced as CVE-2019-15126 and could allow an...

AVM FRITZ!Box < 7.20 'Beyond Kr00k' Information Disclosure Vulnerability

Multiple AVM FRITZ!Box devices are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HPSBPI03687 rev. 3 - Certain HP LaserJet Printer and MFP Products and JetDirect Print Server Products - Information Disclosure

Potential Security Impact Information Disclosure Source: HP, HP Product Security Response Team PSRT Reported by: Broadcom VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs. A Broadcom wireless vulnerability known as "Kr00k" CVE-2019-1512...

HPESBNW04014 rev.2 - HPE Aruba Networking Local Unauthorized Disclosure of Information (Aka "Kr00k" Vulnerability)

Potential Security Impact: Local: Unauthorized Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Instant IAP-204 IL 802.11n/ac Dual 2x2:2 Radio Antenna Connectors AP All versions. Aruba Instant IAP-204 JP 802.11n/ac Dual 2x2:2 Radio Antenna Connectors...

AVM FRITZ!Box 7581 and 7582 < 7.13 Information Disclosure Vulnerability (Kr00k)

AVM FRITZ!Box 7581 and 7582 devices are prone to an information disclosure vulnerability dubbed SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Advisory - Kr00k Vulnerability in Broadcom Wi-Fi chips

There is an information disclosure vulnerability named Kr00k in Broadcom Wi-Fi chips. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information...

Broadcom Wi-Fi KR00K Proof Of Concept

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...

Broadcom Wi-Fi Devices - (KR00K) Information Disclosure Exploit

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...