Mathy Vanhoef🔒 SSL Verified

Table of Contents

• ↓ Pages
• ↓ Wednesday, 7 August 2024
• ↓ Thursday, 10 August 2023
• ↓ Why are DNS requests leaked?
• ↓ Another harder-to-exploit flaw
• ↓ Discussion
• ↓ Top Alternatives to mathyvanhoef.com

6-Month Traffic Trend Estimate

Official Contact & Profiles

Visual representation extracted from mathyvanhoef.com

Content Snippets from mathyvanhoef.com

"Professor at KU Leuven (Belgium) | Ex-PostDoc at NYU | Open to consultancy"

"We've spotted some confusion about the SSID confusion attack. First, it's by no means something to panic about, but it's nice research to make one think about threat models. To address some common misconceptions:"

"The adversary doesn't need to know the pre-shared secret. The SSID Confusion attack can cause a victim to connect to a different SSID, as long as that SSID uses the same credentials as another SSID. However, the adversary doesn't need to know these credentials. After all, if the adversary, for instance, already has access to the password of a home network, they could simply perform a generic man-in-the-middle attack by spoofing the real SSID."

"The adversary doesn't need access to the RADIUS server. To execute this attack against an Enterprise network, the adversary doesn't require any access to the RADIUS server. The attack doesn't require any Enterprise network credentials—no usernames, passwords, certificates, or RADIUS access. The adversary is always an outsider. Having some kind of additional access can increase the impact of the attack though. For example, in Section 4.3, the adversary is also assumed to have the capability to obtain the Wi-Fi decryption keys from a hotspot. However, even in this scenario, direct access to the RADIUS server is not required—only access to the Pairwise Master Key (PMK) is needed."

Key Topics & Focus Areas for mathyvanhoef.com:

Pages

Wednesday, 7 August 2024

Thursday, 10 August 2023

Why are DNS requests leaked?

Another harder-to-exploit flaw

Discussion