{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Experimentul de determinare a parolelor utilizatorilor re\u021belelor Wi-Fi din Tel Aviv","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torul israelian \u00een securitate Ido Hoorvitch din Tel Aviv a publicat rezultatele unui experiment privind fiabilitatea parolelor utilizate pentru a organiza accesul la re\u021belele wireless. \u00cen cadrul studiului, prin captarea cadrelor cu identificatori PMKID, au fost ob\u021binute parolele pentru accesul la 3663 din cele 5000 (73%) de re\u021bele wireless studiate \u00een Tel Aviv. Concluzia a fost c\u0103 majoritatea proprietarilor de re\u021bele wireless folosesc parole nesigure, susceptibile de a fi sparte prin hashing, iar re\u021belele lor wireless pot fi atacate folosind uneltele standard hashcat, hcxtools \u0219i hcxdumptool. <\/p>\n

Ido a folosit un laptop cu Ubuntu Linux pentru a intercepta pachetele re\u021belelor wireless, l-a pus \u00een rucsac \u0219i a umblat prin ora\u0219 p\u00e2n\u0103 c\u00e2nd a reu\u0219it s\u0103 captureze cadre cu identificatori PMKID din cinci mii de re\u021bele wireless diferite. Apoi, a folosit un computer cu 8 GPU NVIDIA QUADRO RTX 8000 48GB pentru a sparge parolele din hash-urile extrase din identificatorul PMKID. Performan\u021ba de spargere a fost de server<\/a> aproape 7 milioane de hash-uri pe secund\u0103. Ca termen de compara\u021bie, pe un laptop obi\u0219nuit, performan\u021ba este de aproximativ 200.000 de hash-uri pe secund\u0103, ceea ce este suficient pentru a sparge o parol\u0103 format\u0103 din 10 cifre \u00een aproximativ 9 minute. <\/p>\n

Pentru a accelera procesul de c\u0103utare, selec\u021bia a fost restric\u021bionat\u0103 la secven\u021be care con\u021bin doar 8 litere mici, precum \u0219i 8, 9 sau 10 cifre. Aceast\u0103 limitare a fost suficient\u0103 pentru a determina parolele pentru 3663 din cele 5000 de re\u021bele. Cele mai populare au fost parolele formate din 10 cifre, folosite \u00een 2349 de re\u021bele. Parolele din 8 cifre au fost folosite \u00een 596 de re\u021bele, cele din 9 cifre \u00een 368, iar parolele din 8 litere mici \u00een 320. Repetarea procesului de c\u0103utare utiliz\u00e2nd dic\u021bionarul rockyou.txt, cu dimensiunea de 133 MB, a permis ob\u021binerea imediat\u0103 a 900 de parole. <\/p>\n

Se presupune c\u0103 situa\u021bia privind fiabilitatea parolelor \u00een re\u021belele wireless din alte ora\u0219e \u0219i \u021b\u0103ri este aproximativ similar\u0103, iar majoritatea parolelor pot fi descoperite \u00een c\u00e2teva ore, cheltuind aproximativ $50 pe o plac\u0103 de re\u021bea wireless cu suport pentru modul de monitorizare a undelor (\u00een experiment a fost folosit\u0103 placa ALFA Network AWUS036ACH). Atacul bazat pe PMKID este aplicabil doar punctelor de acces care suport\u0103 roaming, dar, a\u0219a cum a demonstrat practica, majoritatea produc\u0103torilor nu \u00eel dezactiveaz\u0103. <\/p>\n

Pentru atac s-a folosit o metod\u0103 standard de spargere a re\u021belelor wireless cu WPA2, cunoscut\u0103 din 2018. Spre deosebire de metoda clasic\u0103, care necesit\u0103 interceptarea cadrelor de handshake \u00een timpul conect\u0103rii utilizatorului, metoda bazat\u0103 pe interceptarea PMKID nu este legat\u0103 de conectarea unui nou utilizator la re\u021bea \u0219i poate fi realizat\u0103 \u00een orice moment. Pentru a ob\u021bine date suficiente pentru a \u00eencepe \u00eencercarea de parol\u0103, este necesar\u0103 doar interceptarea unui cadru cu identificatorul PMKID. Astfel de cadre pot fi ob\u021binute at\u00e2t \u00een modul pasiv, urm\u0103rind activitatea legat\u0103 de roaming, c\u00e2t \u0219i for\u021b\u00e2nd ini\u021bierea transmisiei cadrelor cu PMKID \u00een eter, trimi\u021b\u00e2nd o cerere de autentificare c\u0103tre punctul de acces. <\/p>\n

PMKID este un hash generat folosind parola, adresa MAC a punctului de acces, adresa MAC a clientului \u0219i numele re\u021belei wireless (SSID). Ultimele trei parametrii (MAC AP, MAC Station \u0219i SSID) sunt cunoscu\u021bi ini\u021bial, ceea ce permite utilizarea metodei de atac prin dic\u021bionar pentru a determina parola, similar cu modul \u00een care parolele utilizatorilor din sistem pot fi descoperite atunci c\u00e2nd hash-ul lor este expus. Astfel, securitatea accesului la re\u021beaua wireless depinde \u00een totalitate de soliditatea parolei stabilite.

\"Experimentul<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experimentul de identificare a parolelor utilizatorilor din 70% din re\u021belele Wi-Fi din Tel Aviv | ProHoster","description":"Cercet\u0103torul israelian \u00een securitate Ido Hoorvitch (din Tel Aviv) a publicat rezultatele unui experiment privind fiabilitatea parolelor utilizate pentru asigurarea accesului la re\u021bele wireless.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}