{"id":101814,"date":"2021-10-27T10:22:38","date_gmt":"2021-10-27T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva"},"modified":"2021-10-27T10:22:38","modified_gmt":"2021-10-27T08:22:39","slug":"eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","title":{"rendered":"Experiment s ur\u010den\u00edm hesiel pou\u017e\u00edvate\u013eov 70% Wi-Fi siet\u00ed Tel Avivu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Izraelsk\u00fd bezpe\u010dnostn\u00fd v\u00fdskumn\u00edk Ido Hoorvitch (Tel Aviv) publikoval v\u00fdsledky experimentu zameran\u00e9ho na \u0161t\u00fadium spo\u013eahlivosti hesiel pou\u017e\u00edvan\u00fdch na zabezpe\u010denie pr\u00edstupu k bezdr\u00f4tov\u00fdm sie\u0165am. V priebehu v\u00fdskumu na zachyten\u00fdch sn\u00edmkach s identifik\u00e1tormi PMKID sa podarilo z\u00edska\u0165 hesl\u00e1 pre pr\u00edstup k 3663 z 5000 (73%) sk\u00faman\u00fdch bezdr\u00f4tov\u00fdch siet\u00ed v Tel Avive. V\u00fdsledok uk\u00e1zal, \u017ee v\u00e4\u010d\u0161ina vlastn\u00edkov bezdr\u00f4tov\u00fdch siet\u00ed nastavuje nespo\u013eahliv\u00e9 hesl\u00e1, ktor\u00e9 s\u00fa n\u00e1chyln\u00e9 na \u00fatok pomocou ha\u0161ovac\u00edch techn\u00edk, a ich siete m\u00f4\u017eu by\u0165 napadnut\u00e9 pomocou be\u017en\u00fdch n\u00e1strojov hashcat, hcxtools a hcxdumptool. <\/p>\n

Ido pou\u017eil prenosn\u00fd po\u010d\u00edta\u010d s Ubuntu Linux na zachyt\u00e1vanie paketov bezdr\u00f4tov\u00fdch siet\u00ed, umiestnil ho do batohu a potuloval sa po meste, k\u00fdm sa mu podarilo zachyti\u0165 sn\u00edmky s identifik\u00e1tormi PMKID z piatich tis\u00edc r\u00f4znych bezdr\u00f4tov\u00fdch siet\u00ed. Potom vyu\u017eil po\u010d\u00edta\u010d so 8 GPU NVIDIA QUADRO RTX 8000 48GB na l\u00e1manie hesiel z ha\u0161ov z\u00edskan\u00fdch z identifik\u00e1tora PMKID. V\u00fdkon l\u00e1macieho procesu bol na tomto po\u010d\u00edta\u010di serveri<\/a> takmer 7 mili\u00f3nov ha\u0161ov za sekundu. Pre porovnanie, na be\u017enom prenosnom po\u010d\u00edta\u010di je v\u00fdkon pribli\u017ene 200 tis\u00edc ha\u0161ov za sekundu, \u010do sta\u010d\u00ed na rozl\u00fa\u0161tenie jedn\u00e9ho hesla pozost\u00e1vaj\u00faceho z 10 \u010d\u00edslic za pribli\u017ene 9 min\u00fat. <\/p>\n

Na ur\u00fdchlenie anal\u00fdzy bol v\u00fdber obmedzen\u00fd na sekvencie obsahuj\u00face len 8 p\u00edsmen mal\u00e9ho p\u00edsma, ako aj 8, 9 alebo 10 \u010d\u00edslic. Toto obmedzenie sta\u010dilo na to, aby sa na\u0161li hesl\u00e1 pre 3663 z 5000 siet\u00ed. Najpopul\u00e1rnej\u0161ie boli hesl\u00e1 pozost\u00e1vaj\u00face z 10 \u010d\u00edslic, ktor\u00e9 sa pou\u017e\u00edvali v 2349 sie\u0165ach. Hesl\u00e1 z 8 \u010d\u00edslic sa pou\u017e\u00edvali v 596 sie\u0165ach, z 9 \u010d\u00edslic v 368 a hesl\u00e1 z 8 p\u00edsmen mal\u00e9ho p\u00edsma v 320. Opakovan\u00e9 pokusy s pou\u017eit\u00edm slovn\u00edka rockyou.txt, s ve\u013ekos\u0165ou 133 MB, umo\u017enili okam\u017eite z\u00edska\u0165 900 hesiel. <\/p>\n

Predpoklad\u00e1 sa, \u017ee situ\u00e1cia so spo\u013eahlivos\u0165ou hesiel v bezdr\u00f4tov\u00fdch sie\u0165ach v in\u00fdch mest\u00e1ch a krajin\u00e1ch je pribli\u017ene rovnak\u00e1 a v\u00e4\u010d\u0161inu hesiel je mo\u017en\u00e9 z\u00edska\u0165 za nieko\u013eko hod\u00edn, pri\u010dom n\u00e1klady sa pohybuj\u00fa okolo 50 dol\u00e1rov na bezdr\u00f4tov\u00fa kartu s podporou monitorovacieho re\u017eimu (v experimente bola pou\u017eit\u00e1 karta ALFA Network AWUS036ACH). \u00datok zalo\u017een\u00fd na PMKID je uplatnite\u013en\u00fd len na pr\u00edstupov\u00e9 body, ktor\u00e9 podporuj\u00fa roaming, av\u0161ak prax uk\u00e1zala, \u017ee v\u00e4\u010d\u0161ina v\u00fdrobcov ho nevyp\u00edna. <\/p>\n

Na \u00fatok sa pou\u017eila typick\u00e1 met\u00f3da hackovania bezdr\u00f4tov\u00fdch siet\u00ed s WPA2, zn\u00e1ma od roku 2018. Na rozdiel od klasickej met\u00f3dy, ktor\u00e1 si vy\u017eaduje zachytenie handshake r\u00e1mcov po\u010das pripojenia pou\u017e\u00edvate\u013ea, met\u00f3da zalo\u017een\u00e1 na zachyten\u00ed PMKID nie je viazan\u00e1 na pripojenie nov\u00e9ho pou\u017e\u00edvate\u013ea k sieti a m\u00f4\u017ee sa uskuto\u010dni\u0165 kedyko\u013evek. Na z\u00edskanie \u00fadajov dostato\u010dn\u00fdch na za\u010datie h\u013eadania hesla sta\u010d\u00ed zachyti\u0165 jeden r\u00e1mec s identifik\u00e1torom PMKID. Podobn\u00e9 r\u00e1mce je mo\u017en\u00e9 z\u00edska\u0165 ako v pas\u00edvnom re\u017eime, sleduj\u00fac aktivitu s\u00favisiacu s roamingom, tak aj n\u00fatene iniciova\u0165 prenos r\u00e1mcov s PMKID do vzduchu, odoslan\u00edm autentifika\u010dn\u00e9ho po\u017eiadavku k pr\u00edstupov\u00e9mu bodu. <\/p>\n

PMKID je hash, generovan\u00fd pou\u017eit\u00edm hesla, MAC adresy pr\u00edstupov\u00e9ho bodu, MAC adresy klienta a n\u00e1zvu bezdr\u00f4tovej siete (SSID). Posledn\u00e9 tri parametre (MAC AP, MAC Station a SSID) s\u00fa p\u00f4vodne zn\u00e1me, \u010do umo\u017e\u0148uje pou\u017ei\u0165 met\u00f3du preh\u013ead\u00e1vania slovn\u00edka na ur\u010denie hesla, podobne ako sa hesl\u00e1 pou\u017e\u00edvate\u013eov v syst\u00e9me daj\u00fa z\u00edska\u0165 pri \u00faniku ich hashov. Tak\u017ee bezpe\u010dnos\u0165 pr\u00edstupu do bezdr\u00f4tovej siete \u00faplne z\u00e1vis\u00ed od odolnosti nastaven\u00e9ho hesla.

\"Experiment<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0412 \u0445\u043e\u0434\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u0430\u0434\u0440\u0430\u043c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430\u043c\u0438 PMKID \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0434\u043e\u0431\u0440\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a 3663 \u0438\u0437 5000 (73%) \u0438\u0437\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0432 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0435. \u0412 \u0438\u0442\u043e\u0433\u0435 \u0431\u044b\u043b \u0441\u0434\u0435\u043b\u0430\u043d \u0432\u044b\u0432\u043e\u0434, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101815,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101814","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Experiment na ur\u010denie hesiel pou\u017e\u00edvate\u013eov 70% Wi-Fi siet\u00ed Tel Avivu | ProHoster","description":"Izraelsk\u00fd bezpe\u010dnostn\u00fd v\u00fdskumn\u00edk Ido Hoorvitch (Tel Aviv) zverejnil v\u00fdsledky experimentu zameran\u00e9ho na sk\u00famanie spo\u013eahlivosti hesiel pou\u017e\u00edvan\u00fdch na pr\u00edstup k bezdr\u00f4tov\u00fdm sie\u0165am.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442 \u0441 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 70% Wi-Fi \u0441\u0435\u0442\u0435\u0439 \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430 | ProHoster","og:description":"\u0418\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0418\u0434\u043e \u0425\u043e\u0440\u0432\u0438\u0447 (Ido Hoorvitch \u0422\u0435\u043b\u044c-A\u0432\u0438\u0432\u0430) \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430 \u043f\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044e \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/eksperiment-s-opredeleniem-parolej-polzovatelej-70-wi-fi-setej-tel-aviva","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-27T08:22:39+00:00","article:modified_time":"2021-10-27T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101814","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-27 08:23:57","updated":"2026-02-09 21:39:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101814","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=101814"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101814\/revisions"}],"predecessor-version":[{"id":159963,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/101814\/revisions\/159963"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/101815"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=101814"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=101814"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=101814"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}