Mofuputsi oa tšireletso oa Iseraele Ido Hoorvitch (Tel Aviv) o phatlalalitse liphello tsa teko ea ho ithuta matla a li-passwords tse sebelisetsoang ho hlophisa phihlello ea marang-rang a se nang mohala. Phuputsong ea liforeimi tse kentsoeng ka li-identifiers tsa PMKID, ho ne ho ka khoneha ho hakanya li-passwords bakeng sa ho fihlella 3663 ea 5000 (73%) e ithutileng marang-rang a se nang mohala Tel Aviv. Ka lebaka leo, ho ile ha fihleloa qeto ea hore beng ba marang-rang ba bangata ba se nang mohala ba beha li-password tse fokolang tse ka hlaseloang habonolo, 'me marang-rang a bona a se nang mohala a ka hlaseloa ka ho sebelisa lisebelisoa tse tloaelehileng tsa hashcat, hcxtools le hcxdumptool.
Ido o sebelisitse laptop ea Ubuntu Linux ho thibela lipakete tsa marang-rang tse se nang mohala, a li beha ka mokotleng 'me a lelera ho potoloha le toropo ho fihlela a khona ho thibela liforeimi ka li-IDKID (Pairwise Master Key Identifier) tse tsoang marang-rang a likete tse hlano a sa tšoaneng. Ka mor'a moo, o ile a sebelisa k'homphieutha e nang le 8 GPU NVIDIA QUADRO RTX 8000 48GB ho hakanya li-passwords a sebelisa li-hashes tse nkiloeng ho sekhetho sa PMKID. Ts'ebetso ea khetho ho seva sena e ne e le li-hashes tse ka bang limilione tse 7 motsotsoana. Ha ho bapisoa, ho laptop e tloaelehileng, ts'ebetso e ka ba li-hashes tse likete tse 200 motsotsoana, e leng ho lekaneng ho hakanya phasewete e le 'ngoe ea linomoro tse 10 ka metsotso e ka bang 9.
Ho potlakisa khetho, patlo e ne e lekanyelitsoe ho tatellano e kenyelletsang litlhaku tse nyane feela tse 8, hammoho le linomoro tse 8, 9 kapa 10. Moeli ona o ne o lekane ho tseba li-password tsa 3663 ho tsoa ho marang-rang a 5000. Li-password tse tsebahalang haholo e ne e le linomoro tse 10, tse sebelisoang ho marang-rang a 2349. Li-password tsa linomoro tse 8 li sebelisitsoe marangrang a 596, a linomoro tse 9 ho 368, le li-password tsa litlhaku tse nyane tse 8 ho 320. Ho pheta khetho ka ho sebelisa bukana ea rockyou.txt, 133 MB ka boholo, ho re lumelletse ho khetha hanghang li-password tse 900.
Ho nahanoa hore maemo a ts'epahalo ea li-passwords tsa marang-rang a se nang mohala metseng e meng le linaheng tse ling a batla a ts'oana mme li-password tse ngata li ka fumanoa ka lihora tse 'maloa' me li sebelisa chelete e ka bang $ 50 ka karete e se nang mohala e tšehetsang mokhoa oa ho shebella moea (ALFA Network). Karete ea AWUS036ACH e sebelisitsoe tekong). Tlhaselo e thehiloeng ho PMKID e sebetsa feela ho lintlheng tsa ho fihlella tse tšehetsang ho solla, empa joalokaha tloaelo e bontšitse, bahlahisi ba bangata ha ba e thibele.
Tlhaselo e sebelisitse mokhoa o tloaelehileng oa ho hacking marang-rang a se nang mohala ka WPA2, e tsejoang ho tloha ka 2018. Ho fapana le mokhoa oa khale, o hlokang ho thibela liforeimi tsa ho ts'oarana ka letsoho ha mosebelisi a ntse a hokahana, mokhoa o ipapisitseng le ho kheloha ha PMKID ha o tlamelle ho hokahanya ha mosebelisi e mocha marang-rang mme o ka etsoa ka nako efe kapa efe. Ho fumana data e lekaneng ho qala ho hakanya phasewete, o hloka feela ho thibela foreimi e le 'ngoe ka sekhetho sa PMKID. Liforeimi tse joalo li ka amoheloa ka mokhoa o sa sebetseng ka ho lekola ts'ebetso e amanang le ho solla, kapa li ka qala phetiso ea liforeimi ka PMKID moeeng ka ho romella kopo ea netefatso sebakeng sa phihlello.
PMKID ke hash e hlahisoang ka password, aterese ea MAC ea ho fihlella, aterese ea MAC ea bareki, le lebitso la marang-rang a se nang mohala (SSID). Mekhahlelo e meraro ea ho qetela (MAC AP, MAC Station le SSID) e tsejoa qalong, e lumellang tšebeliso ea mokhoa oa ho batla dikishinari ho fumana phasewete, e ts'oanang le hore na li-password tsa basebelisi ba sistimi li ka hakanyetsoa joang haeba hashe ea bona e lutla. Kahoo, ts'ireletso ea ho kena marang-rang a se nang mohala e itšetlehile ka ho feletseng ka matla a sete ea password.
Source: opennet.ru