CVE-2011-3452

Internet Sharing in Apple Mac OS X before 10.7.3 does not preserve the Wi-Fi configuration across software updates, which allows remote attackers to obtain sensitive information by leveraging the lack of a WEP password for a Wi-Fi network...

Book : Backtrack 5 Wireless Penetration Testing by Vivek Ramachandran

Book : Backtrack 5 Wireless Penetration Testing by Vivek Ramachandran This book will provide a highly technical and in-depth treatment of Wi-Fi security. The emphasis will be to provide the readers with a deep understanding of the principles behind various attacks and not just a quick how-to guid...

Book : Backtrack 5 Wireless Penetration Testing by Vivek Ramachandran

Book : Backtrack 5 Wireless Penetration Testing by Vivek Ramachandran This book will provide a highly technical and in-depth treatment of Wi-Fi security. The emphasis will be to provide the readers with a deep understanding of the principles behind various attacks and not just a quick how-to guid...

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 !

Wi-Fi Security Challenge 3 By Security Tube, Prize: $50 ! Wi-Fi Security Challenge 3: This challenge has 2 parts: 3a. Never Judge a Packet by its Type: In this challenge the trace file contains a Shared Key Challenge Text and Encrypted Response. You will need to crack the WEP key with just this...

WiFite The WEP/WPA Cracker version r68 released !

WiFite The WEP/WPA Cracker version r68 released ! Designed for Backtrack4 RC1 distribution of Ubuntu. Linux only; no windows or osx support. Purpose : to attack multiple WEP and WPA encrypted networks at the same time. this tool is customizable to be automated with only a few arguments. wifite ca...

Huawei HG default WEP/WPA generator

Hi, Huawei HG520 and HG530 routers are vulnerable to weak cipher attacks. It is possible to generate the default WEP/WPA key from the MAC address. The following documents detail the process of developing a key generator for these devices. English: http://websec.ca/blog/view/mac2wepkeyhuawei Espao...

WiPhire : A Wireless Penetration Testing Tool !

If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...

Old Wireless Security Flaws Still Haunting Networks

Wireless networks with open access points have become ubiquitous in the last few years as users have come to expect easy Internet access wherever they are. But as access has become more widely available the security of wireless networks has not come close to keeping pace, and as two talks at next...

Wireless Security and Cracking WEP

This video shows just how easy it is to crack the venerable WEP wireless encryption protocol...

Time Warner Router Flaw Exposes Customers

There’s a rudimentary vulnerability in a cable modem/wireless router installed in tens of thousands of homes by Time Warner that could enable an attacker to get full access to the router quite easily. The vulnerability, which was discovered and disclosed recently by a blogger named David Chen, is...

New WiFi Attack Cracks WPA–Again

A pair of Japanese researchers have developed an improvement on an existing technique for attacking wireless LAN traffic that enables them to intercept and decrypt encrypted packets in about a minute, significantly lowering the barrier to entry for attackers looking to listen in on supposedly...

The times-the level of WEP crack full power slightly-vulnerability warning-the black bar safety net

With the rapid development of network technology and network applications, more and more, many users began to focus on network security. Believe the wired network to the wireless network in terms of security there is inherent, since the communication medium is a wireless signal, so the intruder c...

Linksys WVC54GC无线视频摄像头信息泄露漏洞

BUGTRAQ ID: 32666 CVECAN ID: CVE-2008-4390 Linksys WVC54GC是一款支持802.11g协议的无线网络摄像头。 Linksys WVC54GC摄像头使用916/UDP远程管理命令。当特定的报文到达该端口时，设备会用包含有大部分配置信息的报文响应，该报文中包含有用户名、口令、无线ssid、WEP密钥、WEP口令、WPA密钥和DNS服务器。未经加密便通过网络发送了报文，这可能允许攻击者获取上述信息。...

The times-the level of WEP crack full power slightly-vulnerability warning-the black bar safety net

With the rapid development of network technology and network applications, more and more, many users began to focus on network security. Believe the wired network to the wireless network in terms of security there is inherent, since the communication medium is a wireless signal, so the intruder c...

FreeBSD Security Advisory FreeBSD-SA-08:11.arc4random

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-08.11.arc4random Security Advisory The FreeBSD Project Topic: arc4random9 predictable sequence vulnerability Category: core Module: sys Announced: 2008-11-24...

Loving the attack of another piece of land of the WLAN-bug warning-the black bar safety net

Wireless LANWireless Local Area Network, WLANhaving mobility, simple installation, high flexibility and scalability, as traditional wired networks extending, in many special environments to give a wide range of applications. With the Wireless Data Network Solutions constantly launched,“regardless...

FreeBSD -- arc4random(9) predictable sequence vulnerability

Problem Description: When the arc4random9 random number generator is initialized, there may be inadequate entropy to meet the needs of kernel systems which rely on arc4random9; and it may take up to 5 minutes before arc4random9 is reseeded with secure entropy from the Yarrow random number...

Actiontec MI424WR默认WEP KEY安全绕过漏洞

BUGTRAQ ID: 32271 CNCAN ID：CNCAN-2008111301 Actiontec MI424WR是一款SOHO路由器设备。 Actiontec MI424WR存在默认的WEP加密密钥，攻击者可以轻易的解密无线网络通信，获得敏感信息。并对网络进行进一步攻击。 Actiontec MI424WR 目前没有解决方案提供： http://www.actiontec.com/products/product.php?pid=41...

Sql injection

SQL injection vulnerability in kategori.asp in MunzurSoft Wep Portal W3 allows remote attackers to execute arbitrary SQL commands via the kat parameter...

CVE-2008-4573

CVE-2008-4573 describes an SQL injection in kategori.asp of MunzurSoft Wep Portal W3, exploitable via the kat parameter to execute arbitrary SQL. The issue is web-facing (attack vector: network) with a base score of 7.5 (high) per NVD, indicating partial confidentiality, integrity, and availabili...