Receive new posts as email.
RSS 0.91 | RSS 2.0
RDF | Atom
Podcast only feed (RSS 2.0 format)
Get an RSS reader
Get a Podcast receiver
| Sun | Mon | Tues | Wed | Thurs | Fri | Sat |
|---|---|---|---|---|---|---|
| 1 | 2 | 3 | 4 | 5 | 6 | |
| 7 | 8 | 9 | 10 | 11 | 12 | 13 |
| 14 | 15 | 16 | 17 | 18 | 19 | 20 |
| 21 | 22 | 23 | 24 | 25 | 26 | 27 |
| 28 | 29 | 30 | 31 |
This site operates as an independent editorial operation. Advertising, sponsorships, and other non-editorial materials represent the opinions and messages of their respective origins, and not of the site operator or JiWire, Inc.
Entire site and all contents except otherwise noted © Copyright 2001-2006 by Glenn Fleishman. Some images ©2006 Jupiterimages Corporation. All rights reserved. Please contact us for reprint rights. Linking is, of course, free and encouraged.
Powered by
Movable Type
« Qwest Offers Wi-Fi in DSL Modem | Main | Steve Stroh's Broadband Wireless Blog »
Automated LEAP attack tool available: A network engineer last year reported a major hole in Lightweight EAP, Cisco’s previously preferred method of authentication a user across a wireless network to gain access to a network. He held off on releasing an automated tool until now, IDG News Service reports.
Asleap finds LEAP-protected networks, forces users off their connections (deauthenticates them) to force a new authentication, grabs that transaction, and starts a massive dictionary attack on the password. Cisco’s replacement for LEAP, EAP-FAST, will stop dictionary-based cracking from working, Cisco says, but the products aren’t yet available.
Deauthentication is an important part of the wireless cracker’s arsenal because it forces a new authentication right when the cracker is watching. This reduces waiting time, and allows a cracker to monitor traffic for under a minute in some cases. (Deassociation forces a client off a Wi-Fi network, and can be used to force re-authentication or for denial of service attacks — or, as Airespace uses it, to deny connections to rogue access points.)
Cisco issued an unrelated security warning yesterday about its access point management tool, WLSE: The software apparently had a hardcoded username and password built in that provides full access to the unit. The patch disables or removes that back-door account. The WLSE can manage the configuration of hundreds of Cisco APs centrally.
Posted by Glennf at April 8, 2004 1:40 PM
Categories: Security
TrackBack URL for this entry:
https://db.isbn.nu/mt3/mt-tb.pl/1787
Listed below are links to weblogs that reference Tool to Crack Cisco LEAP Released:
» Cisco WiFi Authentication Protocol Hack Tool from Bitsplitter Blog
I saw the demo at Defcon last summer, apparently now the tool for cracking Cisco LEAP has been released. There's been a lot of work on replacing WEP in the standard 802.11 stack with a more secure and infrastructure friendly system. Cisco LEAP was o... [Read More]
Tracked on April 10, 2004 10:58 PM