Muongorori wekuchengetedza weIsrael Ido Hoorvitch (Tel Aviv) akaburitsa mhedzisiro yekuyedza kudzidza simba remapassword anoshandiswa kuronga kupinda kune isina waya network. Muchidzidzo chemafuremu akabatwa ane PMKID anozivisa, zvaigoneka kufungidzira mapassword ekuwana 3663 ye5000 (73%) akadzidza mawaya network muTel Aviv. Nekuda kweizvozvo, zvakagumiswa kuti vazhinji varidzi venetiweki vasina waya vanoseta mapassword asina simba anogona kufungidzira hashi, uye mawaya avo ewaya anogona kurwiswa vachishandisa yakajairwa hashcat, hcxtools uye hcxdumptool zvishandiso.
Ido akashandisa Laptop inomhanya Ubuntu Linux kubata isina waya network mapaketi, akaiisa mubhegi uye akatenderera neguta kusvika akwanisa kubata mafuremu nePMKID (Pairwise Master Key Identifier) ββzviziviso kubva zviuru zvishanu zvakasiyana zvisina waya network. Mushure meizvozvo, akashandisa komputa ine 8 GPU NVIDIA QUADRO RTX 8000 48GB kufungidzira mapassword achishandisa hashi yakatorwa kubva kuPMKID identifier. Kuitwa kwesarudzo pane iyi server kwaisvika mamirioni manomwe hashe pasekondi. Kana tichienzanisa, palaptop yenguva dzose, kuita kwacho kunosvika zviuru mazana maviri ehashe pasekondi, izvo zvinokwana kufungidzira password imwe chete yegumi mumaminitsi mapfumbamwe.
Kuti kukurumidze kusarudzwa, kutsvaga kwaingogumira pakutevedzana kunosanganisira 8 chete mavara madiki, pamwe ne8, 9 kana gumi manhamba. Uku kuganhurirwa kwaikwana kuona mapassword e10 kubva pa3663 network. Mapassword ainyanya kufarirwa aive gumi, aishandiswa pa5000 network. Mapassword ane manhamba masere akashandiswa mumanetiweki 10, ane manhamba 2349 mu8, uye mapassword emavara masere mudiki muna 596. Kudzokorora kusarudzwa tichishandisa duramazwi rerockyou.txt, 9 MB muhukuru, kwakatibvumira kuti tisarudze mapassword mazana mapfumbamwe.
Zvinofungidzirwa kuti mamiriro acho nekuvimbika kwepassword mune isina waya network mune mamwe maguta uye nyika dzinenge dzakafanana uye mazhinji mapassword anogona kuwanikwa mumaawa mashoma uye kushandisa anenge madhora makumi mashanu pane isina waya kadhi inotsigira mhepo yekutarisa maitiro (iyo ALFA Network. AWUS50ACH kadhi rakashandiswa mukuyedza). Kurwiswa kwakavakirwa paPMKID kunoshanda chete kuwana mapoinzi anotsigira kutenderera, asi sekuratidzwa kwaita, vagadziri vazhinji havaidzima.
Kurwiswa uku kwakashandisa yakajairwa nzira yekubira mawireless network neWPA2, inozivikanwa kubvira 2018. Kusiyana neyakajairwa nzira, iyo inoda kubvunzurudza maficha ekubata maoko mushandisi achibatanidza, iyo nzira yakavakirwa paPMKID kubata haina kusungirirwa kune kubatana kwemushandisi mutsva kunetiweki uye inogona kuitwa chero nguva. Kuti uwane data rakakwana kuti utange kufungidzira password, unongoda kubata furemu imwe chete nePMKID identifier. Mafuremu akadaro anogona kugashirwa angave ari muchimiro chekutarisa nekutarisa-ane chekuita nekufamba-famba, kana anogona nechisimba kutangisa kufambisa kwemafuremu nePMKID pamhepo nekutumira chikumbiro chechokwadi kunzvimbo yekuwana.
Iyo PMKID ihashi inogadzirwa uchishandisa password, nzvimbo yekupinda MAC kero, mutengi MAC kero, uye isina waya network zita (SSID). Maparamita matatu ekupedzisira (MAC AP, MAC Station uye SSID) anozivikanwa pakutanga, izvo zvinobvumira kushandiswa kwenzira yekutsvaga duramazwi kuona password, zvakafanana nemapassword evashandisi pane system anogona kufungidzira kana hashi yavo yaburitswa. Saka, kuchengetedzeka kwekupinda mune isina waya network kunoenderana zvachose nesimba reiyo password set.
Source: opennet.ru