{"id":31273,"date":"2019-10-31T21:40:23","date_gmt":"2019-10-31T18:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-wpa3-dragonblood\/"},"modified":"2019-10-31T21:40:23","modified_gmt":"2019-10-31T18:40:23","slug":"vzlom-wpa3-dragonblood","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","title":{"rendered":"Hapja e WPA3: DragonBlood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Hapja
\n
\nMegjith\u00ebse standardi i ri WPA3 ende nuk \u00ebsht\u00eb implementuar plot\u00ebsisht, dob\u00ebsit\u00eb e siguris\u00eb n\u00eb k\u00ebt\u00eb protokoll lejojn\u00eb hackerat t\u00eb thyejn\u00eb fjal\u00ebkalimin Wi-Fi.
\n<\/a><\/noindex>
\nProtokolli Wi-Fi Protected Access III (WPA3) u lan\u00e7ua n\u00eb p\u00ebrpjekje p\u00ebr t\u00eb eliminuar mang\u00ebsit\u00eb teknike t\u00eb protokollit WPA2, i cili p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb \u00ebsht\u00eb konsideruar i pasigurt dhe i ndjesh\u00ebm ndaj sulmit KRACK (Key Reinstallation Attack). Edhe pse WPA3 mb\u00ebshtetet n\u00eb nj\u00eb p\u00ebrshpejtim m\u00eb t\u00eb sigurt, t\u00eb njohur si Dragonfly, i cili synon t\u00eb mbroj\u00eb rrjetet Wi-Fi nga sulmet autonome t\u00eb fjal\u00ebkalimeve (brute-force offline), studiuesit e siguris\u00eb Mathy Vanhoef dhe Eyal Ronen zbuluan dob\u00ebsi n\u00eb implementimin e hersh\u00ebm t\u00eb WPA3-Personal, t\u00eb cilat mund t\u00eb lejojn\u00eb nj\u00eb hacker t\u00eb rikuperoj\u00eb fjal\u00ebkalimet Wi-Fi duke abuzuar me koh\u00ebt e p\u00ebrgjigjes apo me memorizimin ndihm\u00ebs.<\/p>\n

\"Hackerat mund t\u00eb lexojn\u00eb informacionin q\u00eb, si\u00e7 \u00ebsht\u00eb menduar, WPA3 e kodon n\u00eb m\u00ebnyr\u00eb t\u00eb sigurt. Kjo mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb vjedhur informacionin e ndjesh\u00ebm, si numrat e kartave t\u00eb kreditit, fjal\u00ebkalimet, mesazhet e chatit, email-et etj.\"<\/p><\/blockquote>\n

N\u00eb dokumentin hulumtues t\u00eb publikuar sot, k\u00ebrkuesit<\/a><\/noindex>, t\u00eb titulluar DragonBlood, shpjegojn\u00eb dy lloje dob\u00ebsish dizajni n\u00eb WPA3: e para \u00e7on n\u00eb sulme me ulje t\u00eb klasifikimit, dhe e dyta n\u00eb rrjedhje t\u00eb memorizimit ndihm\u00ebs.<\/p>\n

Sulmi i bazuar n\u00eb kanalin e ndihm\u00ebs<\/h3>\n

\nAlgoritmi i kodimit t\u00eb fjal\u00ebkalimit n\u00eb Dragonfly, i njohur gjithashtu si algoritmi \"gjuetis\u00eb dhe pickimit\" (hunting and pecking), p\u00ebrmban deg\u00ebzime t\u00eb kusht\u00ebzuara. N\u00ebse nj\u00eb hacker mund t\u00eb p\u00ebrcaktoj\u00eb se cila deg\u00eb \u00ebsht\u00eb p\u00ebrdorur n\u00eb if-then-else, ai mund t\u00eb dij\u00eb n\u00ebse nj\u00eb element fjal\u00ebkalimi \u00ebsht\u00eb gjetur n\u00eb nj\u00eb iteracion t\u00eb caktuar t\u00eb k\u00ebtij algoritmi. N\u00eb praktik\u00eb, \u00ebsht\u00eb zbuluar se n\u00ebse nj\u00eb hacker mund t\u00eb ekzekutoj\u00eb kod t\u00eb papajtuesh\u00ebm n\u00eb kompjuterin e viktim\u00ebs, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrdoren sulme t\u00eb bazuara n\u00eb kanalin e ndihm\u00ebs p\u00ebr t\u00eb p\u00ebrcaktuar se cila deg\u00eb u ndoq p\u00ebr her\u00eb t\u00eb par\u00eb n\u00eb algoritmin e gjenerimit t\u00eb fjal\u00ebkalimit. Kjo informacion mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb realizuar nj\u00eb sulm t\u00eb ndarjes s\u00eb fjal\u00ebkalimit (e cila \u00ebsht\u00eb e ngjashme me nj\u00eb sulm autonome t\u00eb fjal\u00ebkalimesh).<\/p>\n

Kjo dob\u00ebsi ndiqet duke p\u00ebrdorur identifikuesin CVE-2019-9494.<\/p>\n

Mbrojtja p\u00ebrb\u00ebhet nga z\u00ebvend\u00ebsimi i deg\u00ebzimeve kushtzuese q\u00eb varen nga vlerat sekrete, me mjete q\u00eb zgjedhin me koh\u00eb konstante. Implementimet gjithashtu duhet t\u00eb p\u00ebrdorin llogaritjen e simbolit Legendre<\/a><\/noindex> me koh\u00eb konstante.<\/p>\n

Sulmi n\u00ebp\u00ebrmjet kanaleve an\u00ebsore t\u00eb bazuar n\u00eb sinkronizim<\/h3>\n

\nKur dor\u00ebshkrimi Dragonfly p\u00ebrdor grupe shum\u00ebzuesish t\u00eb caktuar, algoritmi i kodimit t\u00eb fjal\u00ebkalimit p\u00ebrdor nj\u00eb num\u00ebr t\u00eb ndryshuesh\u00ebm itere p\u00ebr kodimin e fjal\u00ebkalimit. Numri i sakt\u00eb i itereve varet nga fjal\u00ebkalimi i p\u00ebrdorur dhe MAC adresat e pik\u00ebs s\u00eb aksesit dhe klientit. Nj\u00eb sulmues mund t\u00eb kryej\u00eb nj\u00eb sulm t\u00eb p\u00ebrkohsh\u00ebm n\u00eb distanc\u00eb ndaj algoritmit t\u00eb kodimit t\u00eb fjal\u00ebkalimit p\u00ebr t\u00eb p\u00ebrcaktuar sa itera ishin t\u00eb nevojshme p\u00ebr kodimin e fjal\u00ebkalimit. Informacioni i rikuperuar mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb kryer nj\u00eb sulm ndaj fjal\u00ebkalimit, i cili \u00ebsht\u00eb i ngjash\u00ebm me nj\u00eb sulm autonom me fjalor.<\/p>\n

P\u00ebr t\u00eb parandaluar sulmin e bazuar n\u00eb sinkronizim, implementimet duhet t\u00eb \u00e7aktivizojn\u00eb grupet shum\u00ebzues t\u00eb dob\u00ebt. Nga nj\u00eb pik\u00ebpamje teknike, grupet MODP 22, 23 dhe 24 duhet t\u00eb \u00e7aktivizohen. Rekomandohet gjithashtu q\u00eb grupet MODP 1, 2 dhe 5 t\u00eb \u00e7aktivizohen.<\/p>\n

Kjo dob\u00ebsi gjithashtu ndiqet duke p\u00ebrdorur identifikuesin CVE-2019-9494 p\u00ebr shkak t\u00eb ngjashm\u00ebris\u00eb s\u00eb implementimit t\u00eb sulmit.<\/p>\n

Zbritje WPA3<\/h3>\n

\nDuke qen\u00eb se protokolli 15-vje\u00e7ar WPA2 \u00ebsht\u00eb p\u00ebrdorur gjer\u00ebsisht nga miliarda pajisjesh, shp\u00ebrndarja e gjer\u00eb e WPA3 nuk do t\u00eb ndodh\u00eb n\u00eb nj\u00eb nat\u00eb. P\u00ebr t\u00eb mb\u00ebshtetur pajisjet e vjetra, pajisjet e certifikuara WPA3 ofrojn\u00eb nj\u00eb 'mod t\u00eb kalimit', i cili mund t\u00eb konfigurohet p\u00ebr t\u00eb pranuar lidhje duke p\u00ebrdorur si WPA3-SAE ashtu edhe WPA2.<\/p>\n

K\u00ebrkuesit besojn\u00eb se modeli i kalimit \u00ebsht\u00eb i ndjesh\u00ebm ndaj sulmeve t\u00eb zbritjes, t\u00eb cilat sulmuesit mund t\u00eb p\u00ebrdorin p\u00ebr t\u00eb krijuar nj\u00eb pik\u00eb aksesit t\u00eb rrem\u00eb q\u00eb mb\u00ebshtet vet\u00ebm WPA2, duke detyruar pajisjet e mb\u00ebshtetura nga WPA3 t\u00eb lidhen me nj\u00eb dor\u00ebshkrim kat\u00ebrk\u00ebndor t\u00eb pasigurt WPA2.<\/p>\n

\"Ne gjithashtu zbuluam nj\u00eb sulm zbritjeje ndaj vet\u00eb dor\u00ebshkrimit SAE ('Autentifikimi i nj\u00ebkohsh\u00ebm i t\u00eb barabart\u00ebve', zakonisht i njohur si 'Dragonfly'), ku mund t\u00eb detyrojm\u00eb pajisjen t\u00eb p\u00ebrdor\u00eb nj\u00eb kurb\u00eb eliptike m\u00eb t\u00eb dob\u00ebt se zakonisht,\" thon\u00eb k\u00ebrkuesit.<\/p><\/blockquote>\n

\nM\u00eb tej, pozita e 'njeriut n\u00eb mes' nuk \u00ebsht\u00eb e nevojshme p\u00ebr t\u00eb kryer nj\u00eb sulm zbritjeje. N\u00eb vend t\u00eb k\u00ebsaj, sulmuesit duhet t\u00eb din\u00eb vet\u00ebm SSID-n\u00eb e rrjetit WPA3-SAE.<\/p>\n

K\u00ebrkuesit raportuan p\u00ebr rezultatet e tyre Wi-Fi Alliance, nj\u00eb organizat\u00eb jofitimprur\u00ebse q\u00eb licencon standardet WiFi dhe produktet Wi-Fi p\u00ebr p\u00ebrputhje, e cila pranoi problemet dhe po punon me ofruesit p\u00ebr t\u00eb korrigjuar pajisjet ekzistuese t\u00eb licencuara WPA3.<\/p>\n

PoC (n\u00eb momentin e publikimit - 404)<\/h3>\n

\nSi nj\u00eb prova koncepti, k\u00ebrkuesit do t\u00eb l\u00ebshojn\u00eb s\u00eb shpejti kat\u00ebr mjete t\u00eb ve\u00e7anta (n\u00eb depozit\u00eb GitHub me hiperlidhjen m\u00eb posht\u00eb), t\u00eb cilat mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb testuar vulnerabilitetet.<\/p>\n

Dragondrain<\/noindex> \u2014 nj\u00eb mjet q\u00eb mund t\u00eb kontrolloj\u00eb deri n\u00eb \u00e7far\u00eb niveli nj\u00eb pik\u00eb qasjeje \u00ebsht\u00eb e prekur nga sulmet DoS n\u00eb dor\u00ebheqjen WPA3 Dragonfly.
\nDragontime<\/noindex> \u2014 nj\u00eb mjet eksperimental p\u00ebr t\u00eb kryer sulme temporale ndaj dor\u00ebheqjes Dragonfly.
\nDragonforce<\/a><\/noindex> \u2014 nj\u00eb mjet eksperimental q\u00eb merr informacion p\u00ebr rivendosjen pas sulmeve temporale dhe realizon nj\u00eb sulm me fjal\u00ebkalim.
\nDragonslayer<\/a><\/noindex> \u2014 nj\u00eb mjet q\u00eb kryen sulme ndaj EAP-pwd.<\/p>\n

Dragonblood: Nj\u00eb Analiz\u00eb e Siguris\u00eb s\u00eb Dor\u00ebzimit SAE t\u00eb WPA3<\/a><\/noindex>
\nFaqja e projektit \u2014 wpa3.mathyvanhoef.com<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c Wi-Fi. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Wi-Fi Protected Access III (WPA3) \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f KRACK-\u0430\u0442\u0430\u043a\u0438 (Key Reinstallation Attack). \u0425\u043e\u0442\u044f WPA3 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Thyerja WPA3: DragonBlood | ProHoster","description":"Megjithat\u00eb, standardi i ri WPA3 ende nuk \u00ebsht\u00eb implementuar si\u00e7 duhet.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c WPA3: DragonBlood | ProHoster","og:description":"\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:23+00:00","article:modified_time":"2019-10-31T18:40:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31273","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:21:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:12:48","updated":"2026-01-21 05:21:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=31273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/31273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/23239"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=31273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=31273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=31273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}