{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Experiment s odhadem hesel u\u017eivatel\u016f 70 % Wi-Fi s\u00edt\u00ed Tel Avivu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Izraelsk\u00fd bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edk Ido Hoorvitch z Tel Avivu zve\u0159ejnil v\u00fdsledky experimentu zam\u011b\u0159en\u00e9ho na spolehlivost hesel pou\u017e\u00edvan\u00fdch pro p\u0159\u00edstup k bezdr\u00e1tov\u00fdm s\u00edt\u00edm. V r\u00e1mci v\u00fdzkumu se poda\u0159ilo zjistit hesla pro p\u0159\u00edstup k 3663 z 5000 (73%) zkouman\u00fdch bezdr\u00e1tov\u00fdch s\u00edt\u00ed v Tel Avivu z zachycen\u00fdch sn\u00edmk\u016f s identifik\u00e1tory PMKID. V\u00fdsledkem bylo zji\u0161t\u011bn\u00ed, \u017ee v\u011bt\u0161ina vlastn\u00edk\u016f bezdr\u00e1tov\u00fdch s\u00edt\u00ed pou\u017e\u00edv\u00e1 ned\u016fv\u011bryhodn\u00e1 hesla, kter\u00e1 jsou n\u00e1chyln\u00e1 k prolomen\u00ed pomoc\u00ed hash\u016f, a jejich bezdr\u00e1tov\u00e9 s\u00edt\u011b lze napadnout pou\u017eit\u00edm b\u011b\u017en\u00fdch utilit hashcat, hcxtools a hcxdumptool. <\/p>\n

Ido pou\u017eil p\u0159enosn\u00fd po\u010d\u00edta\u010d s Ubuntu Linux k zachycen\u00ed paket\u016f bezdr\u00e1tov\u00fdch s\u00edt\u00ed, kter\u00fd um\u00edstil do batohu a proch\u00e1zel m\u011bstem, dokud se mu nepoda\u0159ilo zachytit sn\u00edmky s identifik\u00e1tory PMKID p\u011bti tis\u00edc r\u016fzn\u00fdch bezdr\u00e1tov\u00fdch s\u00edt\u00ed. Pot\u00e9 pou\u017eil po\u010d\u00edta\u010d se 8 GPU NVIDIA QUADRO RTX 8000 48GB k prolomen\u00ed hesel podle hash\u016f z\u00edskan\u00fdch z identifik\u00e1toru PMKID. V\u00fdkon prolomen\u00ed byl na tomto serveru<\/a> \u00farovni t\u00e9m\u011b\u0159 7 milion\u016f hash\u016f za sekundu. Pro srovn\u00e1n\u00ed, b\u011b\u017en\u00fd notebook dosahuje v\u00fdkonu p\u0159ibli\u017en\u011b 200 tis\u00edc hash\u016f za sekundu, co\u017e sta\u010d\u00ed k prolomen\u00ed jednoho hesla skl\u00e1daj\u00edc\u00edho se z 10 \u010d\u00edslic zhruba za 9 minut. <\/p>\n

Pro urychlen\u00ed v\u00fdb\u011bru byl v\u00fdb\u011br omezen na sekvence zahrnuj\u00edc\u00ed pouze 8 mal\u00fdch p\u00edsmen a tak\u00e9 8, 9 nebo 10 \u010d\u00edslic. Toto omezen\u00ed sta\u010dilo k tomu, aby byly ur\u010deny hesla pro 3663 z 5000 s\u00edt\u00ed. Nejobl\u00edben\u011bj\u0161\u00ed byla hesla z 10 \u010d\u00edslic, kter\u00e1 byla pou\u017eita v 2349 s\u00edt\u00edch. Hesla z 8 \u010d\u00edslic byla pou\u017eita v 596 s\u00edt\u00edch, z 9 \u010d\u00edslic v 368 a hesla z 8 mal\u00fdch p\u00edsmen v 320. Opakovan\u00fd v\u00fdb\u011br pomoc\u00ed slovn\u00edku rockyou.txt o velikosti 133 MB umo\u017enil okam\u017eit\u00e9 odhalen\u00ed 900 hesel. <\/p>\n

P\u0159edpokl\u00e1d\u00e1 se, \u017ee situace s d\u016fv\u011bryhodnost\u00ed hesel v bezdr\u00e1tov\u00fdch s\u00edt\u00edch v jin\u00fdch m\u011bstech a zem\u00edch je p\u0159ibli\u017en\u011b shodn\u00e1 a v\u011bt\u0161ina hesel m\u016f\u017ee b\u00fdt prolomena za n\u011bkolik hodin a s n\u00e1klady kolem 50 $ na bezdr\u00e1tovou kartu s podporou monitorovac\u00edho re\u017eimu (v experimentu byla pou\u017eita karta ALFA Network AWUS036ACH). \u00datok na z\u00e1klad\u011b PMKID je pou\u017eiteln\u00fd pouze pro p\u0159\u00edstupov\u00e9 body, kter\u00e9 podporuj\u00ed roaming, ale praxe uk\u00e1zala, \u017ee v\u011bt\u0161ina v\u00fdrobc\u016f jej nezap\u00edn\u00e1. <\/p>\n

K \u00fatoku byl pou\u017eit b\u011b\u017en\u00fd typ hackov\u00e1n\u00ed bezdr\u00e1tov\u00fdch s\u00edt\u00ed s WPA2, zn\u00e1m\u00fd od roku 2018. Na rozd\u00edl od tradi\u010dn\u00edho zp\u016fsobu, kter\u00fd vy\u017eaduje zachycen\u00ed handshake r\u00e1mc\u016f b\u011bhem p\u0159ipojen\u00ed u\u017eivatele, metoda zalo\u017een\u00e1 na zachycen\u00ed PMKID nen\u00ed v\u00e1z\u00e1na na p\u0159ipojen\u00ed nov\u00e9ho u\u017eivatele do s\u00edt\u011b a m\u016f\u017ee b\u00fdt provedena kdykoliv. Pro z\u00edsk\u00e1n\u00ed dat pot\u0159ebn\u00fdch k zah\u00e1jen\u00ed odhalov\u00e1n\u00ed hesla sta\u010d\u00ed zachytit jeden r\u00e1mec s identifik\u00e1torem PMKID. Takov\u00e9 r\u00e1my lze z\u00edskat jak v pasivn\u00edm re\u017eimu, sledov\u00e1n\u00edm aktivity souvisej\u00edc\u00ed s roamingem, tak i vynucen\u00edm zah\u00e1jen\u00ed p\u0159enosu r\u00e1mc\u016f s PMKID do vzduchu zasl\u00e1n\u00edm autentiza\u010dn\u00edho po\u017eadavku na p\u0159\u00edstupov\u00fd bod. <\/p>\n

PMKID je hash generovan\u00fd pomoc\u00ed hesla, MAC adresy p\u0159\u00edstupov\u00e9ho bodu, MAC adresy klienta a n\u00e1zvu bezdr\u00e1tov\u00e9 s\u00edt\u011b (SSID). Posledn\u00ed t\u0159i parametry (MAC AP, MAC Station a SSID) jsou zpo\u010d\u00e1tku zn\u00e1my, co\u017e umo\u017e\u0148uje pou\u017e\u00edt metodu proch\u00e1zen\u00ed slovn\u00edkem k ur\u010den\u00ed hesla, podobn\u011b jako mohou b\u00fdt hesla u\u017eivatel\u016f v syst\u00e9mu odhalena p\u0159i \u00faniku jejich hashe. Tak\u017ee ochrana vstupu do bezdr\u00e1tov\u00e9 s\u00edt\u011b zcela z\u00e1vis\u00ed na odolnosti nastaven\u00e9ho hesla.

\"Experiment<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experiment ur\u010dov\u00e1n\u00ed hesel u\u017eivatel\u016f 70% Wi-Fi s\u00edt\u00ed v Tel Avivu | ProHoster","description":"Izraelsk\u00fd bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edk Ido Hoorvitch (Tel Aviv) zve\u0159ejnil v\u00fdsledky experimentu t\u00fdkaj\u00edc\u00edho se spolehlivosti hesel pou\u017e\u00edvan\u00fdch pro p\u0159\u00edstup k bezdr\u00e1tov\u00fdm s\u00edt\u00edm.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}