WPA migration mode: WEP is back

[maripuri]

This paper presents an attack against Cisco’s WPA Migration Mode, which enables both WPA and WEP clients to associate to an access point using the same Service Set Identifier (SSID).
The paper is structured in the following manner: it begins by explaining some basics about WEP and the details of the attacks against WEP that are used to
attack WPA Migration Mode (in 2). It continues by presenting Cisco’s WPA Migration Mode, explaining it detail how it works and how to configure an access
point to support it (in 3). Then it proceeds to describe in detail how the attack works and its consequences (in 4). Finally, it presents mitigations against the
attack and certain recommendations to aid in protecting against similar attacks (in 5).

El paper se han presentado en la reciente conferencia Black Hat USA 2010 y ya se ha integrado el ataque en la suite Aircrack-ng:

Ticket #766  Add support for Cisco WPA Migration Mode attack

Nuevo ataque:   aireplay-ng -1 0 -e <SSID> -a <BSSID> -h <Attack MAC> <WIFI INTERFACE>

puedes descargarlos desde aqui:  WPA migration mode: WEP is back

[littlesun5]

Y este ataque para que tipo de encriptacion es WEP o WPA?

[maripuri]

"Cisco puntos de acceso soporta el modo WPA migración, que permite tanto a WPA y WEP clientes asociar a un punto de acceso utilizando el mismo Service Set Identifier (SSID).

Lee el paper, yo aún no tuve tiempo de leerlo todo.

Procura usar de una manera moderada las citas. Citar un post entero no tiene finalidad alguna