try this one / if you define a capture-filter (subtype probereq) you need the -f switch and the quotes.
tshark -i $IFACE -n -l -f "subtype probereq" -T fields -e wlan.sa -e...
Type: Posts; User: someone_else
try this one / if you define a capture-filter (subtype probereq) you need the -f switch and the quotes.
tshark -i $IFACE -n -l -f "subtype probereq" -T fields -e wlan.sa -e...
Here's a D-Link 501 (Version B) which works with --force :
[P] E-Nonce: 50:37:4c:db:7a:3c:16:90:4b:57:6a:43:61:c2:85:01
[P] R-Nonce: ae:9b:f2:26:29:23:38:17:0f:d3:7f:bd:92:fb:2d:3b
[P] PKE:...
@ kcdv
i'm glad, that i could help :o and i'm with you: great thread !
And a little update :
VULNERABLE:
Edimax
Fonera Fon 2.0n (FON 2303B)
Ralink RT 3052
Hi,
Got the Firmware, unpacked with fmk, checked with idapro.
Found this function in wscd (it's the "gen-pin" function from the .sh script), but i'm not as good in mips, the (in my opinion)...
i use a modified reaver-src. if i set the -o $logfile switch, reaver writes only the pixie-data in the logfile:
For AuthKey make the following changes:
change :
wps_common.c: printf("[P]...
Sorry for off-topic, i've got further information about Compal:
MAC-Address 5C:35:3B:xx:xx:xx
cbn–zyy–xxx-xxx
Serial-Number: NNNNNxxxxxxxxx
In mine 8 cases, "N" is 53059.(Convert this...
nope. Don't know, if this is ISP/Country specific, but (again) all testet Routers have the same PIN.
Here is the User-Manual, the WPS Menu is described on page 50.
Hi,
checked three of them, each one has as Default-PIN 47385580 in WPS Settings.
For 7 Models with Reaver --> PSK + SSID "(null)", only one shows SSID and PSK. Bully delivers both Values...
@Soxrok2212
some Information about the Compal-Device. Testet with 8 Devices, each of them has the same Pin 47385580 which leads (with friendly Help from Bully) to the correct WPA2-Key (which was...
@ soxrok
please update the Chipset from Hitron CVE30360. The correct one is RT 3352F :confused:
And a new one for the Database:
NOT VULNERABLE:
TP-LINK TL-WDR3500
Atheros AR9340 / 2.4GHz
some updates for the database ;-)
Compal CH6640E
Realtek RTL8192CE
After successful PIN-Test reaver brings for PSK + SSID "(null)" ?
So, what else, its some kind of VULNERABLE ;).
[P]...
Hello,
a suggestion for wash:
can you add some kind of oui-support (like the -M switch in aircrack) ?
Thanks.
Some new Signatures (tested with all 4 possible pixiewps option-combinations)
NOT VULNERABLE:
ASUS RT-N66U
Broadcom BCM4706
[P] E-Nonce: 01:5a:54:01:c1:db:32:e5:2b:33:fd:bb:8c:9d:f0:9e...
Vulnerable:
WPS Manufacturer: D-Link
WPS Model Number: DIR-615H1
CHiP: Ralink RT3352
E-Nonce: 60:d5:32:46:7f:2c:31:a8:e6:0b:db:5a:5e:06:ce:f8...
VULNERABLE:
Modell: Hitron CVE 360
WPS Manufacturer: Ralink Technology, Corp.
WPS Model Number: RT2860
E-Nonce: 0e:3e:ee:d8:97:3d:a4:f1:ed:8d:b6:3a:9c:31:b2:30...