Related Links

  • WPA CRACKER
  • Elsevier Ltd is not responsible for the content of external websites.

Related Stories

  • Fortify cautions on new WiFi security threat
    The WiFi Alliance is putting the finishing touches to a peer-to-peer version of its popular WiFi standards. Known as WiFi Direct, the proposed standard allows WiFI devices to link directly to each other, without the need for a router or access point, something which poses a potentially serious security threat to companies with WiFi networks, according to Fortify.
  • Defcon: Researchers warn software updates can be hijacked
    Researchers with Radware were busy over the weekend showing a Defcon audience how a classic man-in-the-middle attack could be engineered when notebook computers attempt to seek out updates for their software across public access WiFi networks.
  • Australian police wardriving for insecure WiFi access points
    Police in Australia have taken to the streets to detect unsecured WiFi access point - and then visiting the companies/home owners of the sites to give them information security advice.
  • License to hack? - Ethical hacking
    Ethical hacking seems to be a contradiction in terms, but what better way of making enterprises pay attention to their security flaws, than by acting like criminals? William Knight investigates
  • McAfee update reverberates amongst O2 mobile broadband users
    A signature update for McAfee's security software, released late last week, has been causing problems for Windows users around the world and particularly for users of O2's mobile broadband service, Infosecurity can reveal.

News

WiFi cracking service breaks WPA passwords in 20 minutes

08 December 2009

A new online service - launched by IT security researcher Moxie Marlinspike - claims to crack vulnerable WiFi passwords in around 20 minutes, a process that would take a dual-core PC around 120 hours.

The cloud-based service - which costs $17.00 a time - reportedly uses a 400-node cluster of computers to run through around 130 million WPA password combinations in 20 minutes.

To use the service, internet users upload a copy of the handshake file that occurs when a WiFi device starts negotiating a link with a WiFi access point and the wpacracker.com site advises whether the password is crackable or not.

The security researcher behind the new service said that, whilst rainbow tables can be used to crack a WPA password, they have not been used in his database. In his explanation about rainbow tables, he noted that the Church of WiFi  has uploaded a collection to the Net.

The problem with rainbow tables, Marlinspike said, is that "since each handshake is salted with the ESSID of the network, you have to build a unique set of rainbow tables for each network that you'd potentially like to audit".

Marlinspike added that the Church Of Wifi has gone to heroic efforts to build tables for the 1000 most popular ESSIDs, "but we find that this is often not enough".

"If someone has enabled WPA encryption on their wireless network, chances are that they've changed their ESSID to something that's not very common as well."

Interestingly, Marlinspike appears to have developed the code that drives the 400-node network himself, rather than use the OpenWall dictionary as a number of experts have when developing their own personal software to complete the WPA cracking process.

In the service's FAQs, Marlinspike said that that "in our experience the OpenWall dictionaries were tailored more specifically for Unix logins than for WPA networks".

"Our dictionary was meticulously compiled with WPA cracking in mind, and includes word combinations, phrases, numbers, symbols, and elite speak. It has worked quite well for us, and now we're hoping that it can be helpful for you."

 

This article is featured in:
Internet and Network Security Malware and Hardware Security Wireless and Mobile Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.