WiFi Attack Vectors

Question 1

The article describes four examples of the flawed implementation of RC4 in WEP. List 2.

Answer 1

The IV is prepended to the key prior to the generation of the key stream & IV is a relatively small (3 bytes)

Question 2

What is wrong with using a sequential IV generator?

Answer 2

predictably generates weak IV’s

Question 3

Describe how a PRGA injection attack works?

Answer 3

exploits the IV and ciphertext appearing in captured packets

Question 4

Name one tool that produces a PRGA injection attack

Answer 4

WEPWedgie

Question 5

Name one tool that breaks the WPA-PSK encryption protocol

Answer 5

coWPAtty

Question 6

What is the primary weakness of using EAP/LEAP on Windows computers?

Answer 6

NT hashing uses a plaintext value to always hash to the same hashed value