Leo92

19 reputation

bio	website
	location
	age
visits	member for	10 months
	seen	Jul 29 '12 at 20:34
stats	profile views	7

	19 reputation	bio	website		visits	member for	10 months
14 badges		location			seen	Jul 29 '12 at 20:34

summary answers questions tags badges favorites bounties reputation activity

24 Actions

suggestions reviews revisions comments badges posts accepts all

Feb 27	awarded	Notable Question
Dec 13	awarded	Popular Question
Jul 29	comment	Four-way Handshake in WPA-Personal (WPA-PSK) THIS IS EXACTLY WHAT I WAS LOOKING FOR !!! , thanks
Jul 29	accepted	Four-way Handshake in WPA-Personal (WPA-PSK)
Jul 29	comment	Four-way Handshake in WPA-Personal (WPA-PSK) well I dont know exactly , I just want to know how to its wpa authentication work , so maybe both of them if its possible ?
Jul 28	comment	Four-way Handshake in WPA-Personal (WPA-PSK) ok thanks i will read it
Jul 28	comment	Four-way Handshake in WPA-Personal (WPA-PSK) maybe i am confused about four way handshake , I just want to know how to authenticate to the ap ? if password is never sent , how its possible to get the password from the captured handshake brute forcing it or using similar ways ?
Jul 28	awarded	Commentator
Jul 28	comment	Four-way Handshake in WPA-Personal (WPA-PSK) yes , I want to know how password is securely transfered between ap and station
Jul 28	comment	Four-way Handshake in WPA-Personal (WPA-PSK) I dont get it, in which part the password is being sent ?
Jul 28	asked	Four-way Handshake in WPA-Personal (WPA-PSK)
Jul 23	comment	How password hashing is useful in MITM attack? simply after sniffing the nonce , you should generate a table in this way: hash(hash(wordl) + nonce) ; hash(hash(word2) + nonce) after that you can just match the end hash , if you find it you find the password , of course i am not saying that its a good way but its possible to do
Jul 23	comment	How password hashing is useful in MITM attack? its not necessary , one nonce is enough to find the original password
Jul 21	comment	How password hashing is useful in MITM attack? after thinking about it, the attacker can sniff the nonce and then generate rainbow table for that nonce and compare the result with the hash(hash(pass) + nonce) , right ?
Jul 21	accepted	How password hashing is useful in MITM attack?
Jul 21	comment	How password hashing is useful in MITM attack? thank you very much, that's what I was looking for and you made things looks easy to me , now I get it, but now I have question , If for each request there is a unique nonce , how is possible to crack the password like in wireless ? what the attacker should do ?
Jul 20	awarded	Student
Jul 20	comment	How password hashing is useful in MITM attack? but the salt is saved at the server side so its impossible to sniff it , the only way to get the salt is to steal the server database, right ?
Jul 20	comment	How password hashing is useful in MITM attack? I just did a search for salt, and from my understanding I can say the salt method isn't useful at all for the MiTM attack because the salt is saved at the server side so sniffing the password is enough for the attacker, how ever its useful in cases when some one steal server database so he cant crack the password using for example rainbow tables ,correct me please if I am wrong ?
Jul 20	comment	How password hashing is useful in MITM attack? ok , so I cant see a safe way to authenticate because in all cases the attacker can sniff the password or sniff the hash, is this mean that there is no solution for safe authentication ?