(untitled)

Do attacks on WPA networks still make sense in 2024? Do they pose virtually no threat anymore? The whole attack is based on cracking the password anyway so you have to rely on the fact that the user has applied a weak password to the network.(USER WAS WARNED FOR THIS POST, You should always elaborate on your opinions rather than just spilling the soykaf.)

If your trying to connect to that network and pivot to other machines using exploit or other methods. They're somewhat uncommon these days as phishing and webapp is more reachable anywhere, but if your able to get in wifi antenna range, you basically have your own machine on the network which you can do a ton of damage. >tl;dr It still makes since as they're still exploited, its used less often because you need to be in a physical range of the network when phishing/malware can reach anywhere with internet connection.

>>24113 I meant exactly breaking wpa handshake using bruteforce. Now all distributors give random passwords to routers so it is very hard to get into any network. Unless the problem lies in dictionaries and how to create them.

>>24114 i mean yes and no i've worked in isps and the most common password for peoples router is their phone number, its supprisingly common for people to change their password to something really simple. https://www.darkreading.com/cyberattacks-data-breaches/wardrivers-can-still-crack-70-of-wifi-passwords

>>24121 ISPs have access to the router passwords? Or do you mean you worked in installation and helped set up people's passwords?

>>24124 >Or do you mean you worked in installation and helped set up people's passwords? I use to work tech support, I know the default strong password wpa2 provided usually gets changed when the isp tech comes in a installs the router/modem. The router/modem password is a different story, that's how you access the web panel for the modem/router. that usually never gets changed from it's default creds (usually admin:admin) but that's on the Lan side of the router. >ISPs have access to the router passwords? Depends on the isp, most have a POTD (Password of the day) its a strong password only accessible on the ISP side that allows techs to remote in to the modem to fix issues (usually force a reboot, cause I know the customer didn't actually turn it off and on), but also reset creds when they forget the wifi password.

Cracking WPA isn't a thing anymore, (apart from specific cases). But EvilTwin attack goes brrrr

>>24139 it is possible to create fake AP with airbase-ng and forward traffic to own phising website? Website should works locally on this same machine as fake AP

>>24114 >Now all distributors give random passwords to routers so it is very hard to get into any network Yeah and people know that certain ISP venders the default WiFi password is a upper and lower letters string they can generate a word list with every possible combination. That said where can I find these lists or how would I generate one I know a certain vender that does this for new routers and if you look for stock SSID names some people typically old people don't change them.