I have a pretty simple question about KRACK.
From what I have read it would be very common to be able to forge, decrypt, delay and block client packets as well as AP packets using KRACK.
Does this mean that an attacker could get some sort of login credentials in order to normally connect to the targeted AP? Or would the attacker have to remain in his/her MITM position?
In case the attacker would have to remain in the MITM position, could he/she use only manipulate/read the traffic of a user or could he/she also for instance establish a TCP connection and surf the Internet etc?