software?
Well, a security researcher has revealed a new WiFi hacking
technique that makes it easier for hackers to crack WiFi passwords
of most modern routers.
Discovered by the lead developer of the popular
password-cracking tool Hashcat, Jens ‘Atom’ Steube, the new WiFi
hack works explicitly against WPA/WPA2 wireless network protocols
with Pairwise Master Key Identifier (PMKID)-based roaming features
enabled.
The attack to compromise the WPA/WPA2 enabled WiFi networks was
accidentally discovered by Steube while he was analyzing the
newly-launched WPA3 security
standard.
[1]
This new WiFi hacking method could potentially allow attackers to
recover the Pre-shared Key (PSK) login passwords, allowing them to
hack into your Wi-Fi network and eavesdrop on the Internet
communications.
How to Hack WiFi Password Using PMKID
methods require attackers to wait for someone to log into a network
and capture a full 4-way authentication handshake of EAPOL, which
is a network port authentication protocol.
Whereas, the new attack[2]
no longer requires another user to be on the target network to
capture credentials. Instead, it is performed on the RSN IE (Robust
Security Network Information Element) using a single EAPOL
(Extensible Authentication Protocol over LAN) frame after
requesting it from the access point.
Also Read: How to Hack WPA2
WiFi Protocol Using KRACK Attack[3]
Robust Security Network is a protocol for establishing secure
communications over an 802.11 wireless network and has PMKID, the
key needed to establish a connection between a client and an access
point, as one of its capabilities.
Step 1 — An attacker can use a tool, like hcxdumptool[4]
(v4.2.0 or higher), to request the PMKID from the targeted access
point and dump the received frame to a file.
$ ./hcxdumptool -o test.pcapng -i wlp39s0f3u4u5 –enable_status
tool[5], the output (in pcapng
format) of the frame can then be converted into a hash format
accepted by Hashcat.
$ ./hcxpcaptool -z test.16800 test.pcapng
(v4.2.0 or higher) password cracking tool to obtain the WPA PSK
(Pre-Shared Key) password, and bingo, that’s how to hack wifi
password.
$ ./hashcat -m 16800 test.16800 -a 3 -w 3 ‘?l?l?l?l?l?lt!’
may take time depending on its length and complexity.
“At this time, we do not know for which vendors or for how many
routers this technique will work, but we think it will work against
all 802.11i/p/q/r networks with roaming functions enabled (most
modern routers),” Steube said.
Since the new WiFi hack only works against networks with roaming
functions enabled and requires attackers to brute force the
password, users are recommended to protect their WiFi network with
a secure password that’s difficult to crack.
This WiFi hack also does not work against next-generation
wireless security protocol WPA3, since the new protocol is “much
harder to attack because of its modern key establishment protocol
called “Simultaneous Authentication of Equals” (SAE).”
Wanna learn more about on how to hack wifi? Check
this: Wi-Fi Hacking and
Penetration Testing From Scratch Training Course.
[7]
References
- ^
WPA3 security standard
(thehackernews.com) - ^
new
attack (hashcat.net) - ^
How to Hack WPA2 WiFi Protocol Using
KRACK Attack (thehackernews.com) - ^
hcxdumptool
(github.com) - ^
hcxpcaptool tool
(github.com) - ^
Hashcat
(github.com) - ^
Wi-Fi Hacking and Penetration Testing
From Scratch Training Course
(deals.thehackernews.com)
Read more http://feedproxy.google.com/~r/TheHackersNews/~3/NK4We6_uJ4c/how-to-hack-wifi-password.html

