{"id":31538,"date":"2019-10-31T21:41:45","date_gmt":"2019-10-31T18:41:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3\/"},"modified":"2019-10-31T21:41:45","modified_gmt":"2019-10-31T18:41:45","slug":"dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","title":{"rendered":"Dragonblood: primeiras vulnerabilidades do Wi-Fi WPA3 identificadas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Em outubro de 2017, foi inesperadamente descoberto que o protocolo Wi-Fi Protected Access II (WPA2) tinha uma s\u00e9ria vulnerabilidade na criptografia do tr\u00e1fego Wi-Fi, permitindo que as senhas dos usu\u00e1rios fossem descobertas e que a troca de dados da v\u00edtima fosse monitorada. A vulnerabilidade recebeu o nome de KRACK (abrevia\u00e7\u00e3o de Key Reinstallation Attack) e foi identificada pelos especialistas Mathy Vanhoef e Eyal Ronen. Ap\u00f3s a descoberta, a vulnerabilidade KRACK foi corrigida com atualiza\u00e7\u00f5es de firmware para os dispositivos, e o protocolo WPA3, que chegou no ano passado para substituir o WPA2, deveria definitivamente eliminar os problemas de seguran\u00e7a nas redes Wi-Fi. <\/p>\n

\"Dragonblood:<\/p>\n

Infelizmente, os mesmos especialistas encontraram vulnerabilidades igualmente perigosas no protocolo WPA3. Portanto, \u00e9 necess\u00e1rio esperar e confiar em novas atualiza\u00e7\u00f5es de firmware para pontos de acesso sem fio e dispositivos, ou teremos que viver cientes das vulnerabilidades das redes Wi-Fi dom\u00e9sticas e p\u00fablicas. As vulnerabilidades encontradas no WPA3 receberam o nome gen\u00e9rico de Dragonblood.<\/p>\n

As ra\u00edzes do problema, como antes, est\u00e3o no funcionamento do mecanismo de estabelecimento de conex\u00e3o ou, como \u00e9 chamado no padr\u00e3o, \"handshake\". Este mecanismo no padr\u00e3o WPA3 \u00e9 denominado Dragonfly. Antes da descoberta do Dragonblood, acreditava-se que ele era bem protegido. O pacote Dragonblood cont\u00e9m cinco tipos de vulnerabilidades: nega\u00e7\u00e3o de servi\u00e7o, duas vulnerabilidades de degrada\u00e7\u00e3o de seguran\u00e7a (downgrade) e duas vulnerabilidades com ataque de canais secund\u00e1rios (side-channel).<\/p>\n

<\/center>
\n\"Dragonblood:<\/p>\n

A nega\u00e7\u00e3o de servi\u00e7o n\u00e3o leva ao vazamento de dados, mas pode ser um evento desagrad\u00e1vel para o usu\u00e1rio que, repetidamente, n\u00e3o consegue se conectar ao ponto de acesso. As outras vulnerabilidades permitem que um atacante recupere senhas de autentica\u00e7\u00e3o do usu\u00e1rio e monitore qualquer informa\u00e7\u00e3o cr\u00edtica para o usu\u00e1rio.<\/p>\n

Os ataques de degrada\u00e7\u00e3o de seguran\u00e7a permitem for\u00e7ar a mudan\u00e7a para uma vers\u00e3o anterior do protocolo WPA2 ou para op\u00e7\u00f5es mais fracas dos algoritmos de criptografia do WPA3, e ent\u00e3o continuar com os m\u00e9todos de quebra j\u00e1 conhecidos. Um ataque utilizando canais secund\u00e1rios explora caracter\u00edsticas dos algoritmos do WPA3 e suas implementa\u00e7\u00f5es, permitindo, no final, utilizar m\u00e9todos de quebra de senhas j\u00e1 conhecidos. Mais detalhes aqui. Um conjunto de ferramentas para identificar as vulnerabilidades Dragonblood pode ser encontrado neste link.<\/p>\n

\"Dragonblood:<\/p>\n

A Alian\u00e7a Wi-Fi, respons\u00e1vel pelo desenvolvimento dos padr\u00f5es Wi-Fi, foi informada sobre as vulnerabilidades encontradas. Relata-se que os fabricantes de equipamentos est\u00e3o preparando firmwares alterados para fechar as lacunas de seguran\u00e7a descobertas. N\u00e3o ser\u00e1 necess\u00e1rio substituir ou devolver o equipamento.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043c\u0435\u043d \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 KRACK (\u0441\u043e\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043e\u0442 Key Reinstallation Attack) \u0438 \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u0430\u043c\u0438 \u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u0439\u0430\u043b\u043e\u043c \u0420\u043e\u043d\u0435\u043d\u043e\u043c (Eyal Ronen). \u041f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23463,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31538","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dragonblood: primeiras vulnerabilidades do Wi-Fi WPA3 detectadas | ProHoster","description":"Em outubro de 2017, foi inesperadamente descoberto que o protocolo Wi-Fi Protected Access II (WPA2), utilizado para criptografar o tr\u00e1fego Wi-Fi, possui uma grave vulnerabilidade que permite identificar as senhas dos usu\u00e1rios.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Dragonblood: \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043f\u0435\u0440\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Wi-Fi WPA3 | ProHoster","og:description":"\u0412 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2017 \u0433\u043e\u0434\u0430 \u043d\u0435\u043e\u0436\u0438\u0434\u0430\u043d\u043d\u043e \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 Wi-Fi Protected Access II (WPA2) \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430 Wi-Fi \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0442\u0435\u043c.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/dragonblood-vyyavleny-pervye-uyazvimosti-wi-fi-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:45+00:00","article:modified_time":"2019-10-31T18:41:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31538","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:39:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:15:45","updated":"2026-01-21 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/31538","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=31538"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/31538\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/23463"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=31538"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=31538"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=31538"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}