WPA cracker in the cloud

http://www.wpacracker.com/

by mcxx • 17 years ago

87 30 17 years ago

tptacek3• 17 years ago

This is a great idea. Moxie Marlinspike is generally someone worth watching. I didn't do the math on his cloud hosting, but he could double the price here and it'd still be worth it.

What this site really says is, "don't use WPA-PSK on sensitive networks."

ryanwaggoner2• 17 years ago

What should the average home user with a standard linksys router use?

tptacek3• 17 years ago

A long random string for a password.

pyre2• 17 years ago

WPA2 (or WPA-AES) and a 64-character password. It's not like people type in their network password every time they join the network. This is one of the areas there it's not that much of a hassle to use a long password since you normally just type in the password/passphrase when setting up the network connection (and people are possibly used to long, random-character passwords from using WEP keys).

cool-RR• 17 years ago

Worry about better things.

Seriously, what's your concern? There's a very low chance that someone will be determined enough to use tools like these to hack into your LAN, and even if he'll do that, so what?

sheldonwt• 17 years ago

This really is a great idea. I think this style of cloud cracking might have larger applications as well, outside of just PSK. Inexperienced users will pay to crack systems like this.

cottsak• 17 years ago

Indeed. Fantastic business opportunity.

mleonhard2• 17 years ago

Is WPA2 still safe from this kind of attack?

jrockway• 17 years ago

Guessing the password? Yes.

Tuna-Fish3• 17 years ago

I have to clarify: It's not just about guessing the password. If you do guess it, even on WPA2 you could just try logging in . Try too many times, and someone might notice. But on WPA-PSK, you can capture some traffic, and then run huge tables of passwords against it, you don't have to do any login attempts until you find the right one. And yes, WPA2 is safe against that.

jodrellblank• 17 years ago

If I could get to the cloud, I wouldn't need a WPA key cracker+..

(+Comment does not not endorse theft of wireless networking).

jmatt• 17 years ago

Think nosey neighbors. It's, of course, unethical, invasive and rude... but that hasn't stopped any of my neighbors from looking in the windows when they are open.

To me the valuable part is the dictionary. The rest of this is relatively straight forward script kiddy HOWTO stuff. Most people I know have an extra computer that is idling 95% of the time and could run a process for 5+ days. It's the relatively instant gratification and ease of use that I like.

blhack• 17 years ago

A lot of people seem to misunderstand what this is for. This isn't about breaking into your neighbor's wifi, this is about professional penetration testers more easily being able to crack wpa-psk.

redcap• 17 years ago

This professional looking webpage is brought to you by the following non-professional-looking names:

A Thoughtcrime Labs Production In Association With The Institute For Disruptive Studies

No one else thinks this is just a little bit dodgy? I know it seems to be par for the course for some of the security scene, but still.

caf• 17 years ago

Moxie Marlinspike is a well-known (if a little eccentric) security researcher.

WPA cracker in the cloud

Related Stories