49 reputation
114
bio website
location
age
visits member for 2 years, 5 months
seen May 10 at 7:59

Jul
29
comment Four-way Handshake in WPA-Personal (WPA-PSK)
THIS IS EXACTLY WHAT I WAS LOOKING FOR !!! , thanks
Jul
29
comment Four-way Handshake in WPA-Personal (WPA-PSK)
well I dont know exactly , I just want to know how to its wpa authentication work , so maybe both of them if its possible ?
Jul
28
comment Four-way Handshake in WPA-Personal (WPA-PSK)
ok thanks i will read it
Jul
28
comment Four-way Handshake in WPA-Personal (WPA-PSK)
maybe i am confused about four way handshake , I just want to know how to authenticate to the ap ? if password is never sent , how its possible to get the password from the captured handshake brute forcing it or using similar ways ?
Jul
28
comment Four-way Handshake in WPA-Personal (WPA-PSK)
yes , I want to know how password is securely transfered between ap and station
Jul
28
comment Four-way Handshake in WPA-Personal (WPA-PSK)
I dont get it, in which part the password is being sent ?
Jul
23
comment How password hashing is useful in MITM attack?
simply after sniffing the nonce , you should generate a table in this way: hash(hash(wordl) + nonce) ; hash(hash(word2) + nonce) after that you can just match the end hash , if you find it you find the password , of course i am not saying that its a good way but its possible to do
Jul
23
comment How password hashing is useful in MITM attack?
its not necessary , one nonce is enough to find the original password
Jul
21
comment How password hashing is useful in MITM attack?
after thinking about it, the attacker can sniff the nonce and then generate rainbow table for that nonce and compare the result with the hash(hash(pass) + nonce) , right ?
Jul
21
comment How password hashing is useful in MITM attack?
thank you very much, that's what I was looking for and you made things looks easy to me , now I get it, but now I have question , If for each request there is a unique nonce , how is possible to crack the password like in wireless ? what the attacker should do ?
Jul
20
comment How password hashing is useful in MITM attack?
but the salt is saved at the server side so its impossible to sniff it , the only way to get the salt is to steal the server database, right ?
Jul
20
comment How password hashing is useful in MITM attack?
I just did a search for salt, and from my understanding I can say the salt method isn't useful at all for the MiTM attack because the salt is saved at the server side so sniffing the password is enough for the attacker, how ever its useful in cases when some one steal server database so he cant crack the password using for example rainbow tables ,correct me please if I am wrong ?
Jul
20
comment How password hashing is useful in MITM attack?
ok , so I cant see a safe way to authenticate because in all cases the attacker can sniff the password or sniff the hash, is this mean that there is no solution for safe authentication ?
Jul
20
comment How password hashing is useful in MITM attack?
@AndreyBotalov thanks but it didn't respond to my questions