kr00ker

kr00ker 描述 该脚本是一个利用 KR00K 漏洞（CVE-2019-15126）的简单实验，可以解密易受攻击设备（接入点或客户端）中的部分 WPA2 CCMP 数据。 更具体地说，该脚本尝试在已知以下信息的情况下恢复 WPA2 CCMP 数据包的解密数据： TK（128 位全零） Nonce（在数据包头中以明文发送） 加密数据 其中： WPA2 AES-CCMP 解密 -- AESNonce,TK XOR Encrypted Data = Decrypted Data 解密数据流以 "\xaa\xaa\x03\x00\x00\x00" 开头 Nonce（104 位）=...

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Apple Ipados

kr00ker ============ Description This script is a simple ex...

Broadcom Wi-Fi Devices - KR00K Information Disclosure

Broadcom Wi-Fi Devices - KR00K Information Disclosure Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this...

Broadcom Wi-Fi Devices - 'KR00K Information Disclosure

Kr00ker Experimetal KR00K PoC in python3 using scapy Description: This script is a simple experiment to exploit the KR00K vulnerability CVE-2019-15126, that allows to decrypt some WPA2 CCMP data in vulnerable devices. More specifically this script attempts to retrieve Plaintext Data of WPA2 CCMP...