94% of Wi-Fi networks lack protection against deauthentication attacks - Help Net Security (www.helpnetsecurity.com)
from kid@sh.itjust.works to cybersecurity@sh.itjust.works on 14 Mar 12:26
https://sh.itjust.works/post/34419476

#cybersecurity

threaded - newest

BakedCatboy@lemmy.ml on 14 Mar 14:19 next collapse

Tl;dr enable protected management frames if you can.

Buelldozer@lemmy.today on 14 Mar 16:20 collapse

It’s the “if you can” part that’s holding it back. There’s a lot of devices, both clients and WiFi systems, out there that don’t support it well.

AmbiguousProps@lemmy.today on 14 Mar 19:08 collapse

I’ll just leave this here…

pwnagotchi.org

01189998819991197253@infosec.pub on 14 Mar 22:13 collapse

How different is this from aircrackng? Based on the description, it sounds like they both accomplish the same thing.

AmbiguousProps@lemmy.today on 14 Mar 22:25 collapse

Pwnagotchi mainly just does gamified deauth, by default it doesn’t do the cracking of the collected pcaps.

Aircrackng can be installed as a plugin, but since it typically runs on rpi zeros it isn’t very performant. You’d typically want to move your pcaps to a different machine to do the cracking portion (either using aircrack or hashcat), or use aircrack’s entire suite on a more powerful laptop or something like that.

01189998819991197253@infosec.pub on 14 Mar 22:29 collapse

Ah ok cool. So pwnagotchi is intended more as a teaching tool or a POC pentest, as opposed to an actual pentest. Am I understanding correctly?

AmbiguousProps@lemmy.today on 14 Mar 22:41 collapse

Yeah, pretty much. Although I’m sure plenty of people use it for malicious purposes, since it’s more convenient than carrying around a laptop, or for building out/competing on the opwngrid.

It’s definitely not meant for commercial use, if that’s what you’re asking.

01189998819991197253@infosec.pub on 15 Mar 02:14 collapse

Less for commercial use, and more for a true pentest of your own network. Well, I guess also for commercial use, for those professional pentesters out there, but I wasn’t thinking of them when I asked :/

This whole gamified thing sounds pretty awesome, to be honest, and I’m intrigued.