ʲôÊÇKRACKÎó²î(Key Reinstallation Attacks)£¿£¿£¿£¿£¿£¿£¿

KRACK Îó²î£¬£¬£¬£¬£¬£¬£¬£¬¼´ÃÜÔ¿ÖØ×°¹¥»÷Îó²î£¬£¬£¬£¬£¬£¬£¬£¬ÊÇ2017Äê10ÔÂ16ÈÕÓɱÈÀûʱÑо¿Ö°Ô±Mathy Vanhoef£¨ÂíµÙ·ÍòºÕ¸¥£©Ðû²¼µÄWPA/WPA2ЭÒéÇå¾²ÎÊÌâ¡£¡£¡£¡£¡£¡£¸ÃÎó²îͨ¹ýWPA/WPA2ЭÒéÔÚʵÏÖÉϵÄȱÏÝ£¬£¬£¬£¬£¬£¬£¬£¬´¥·¢ÃÜÔ¿µÄÖØ×°Öã¬£¬£¬£¬£¬£¬£¬£¬¿ÉÄÜʹÖÐÐÄÈ˹¥ »÷Õß»ñµÃ½âÃÜÎÞÏßÊý¾Ý°üµÄÄÜÁ¦¡£¡£¡£¡£¡£¡£

ͨÓÃÎó²îÅû¶ÍøÕ¾£¨CVE£©¼Í¼ÁË10¼¸¸öKRACKÎó²î¿ÉÄÜÒý·¢µÄÎÊÌ⣨CVE-2017-13077 ~ 13082£¬£¬£¬£¬£¬£¬£¬£¬CVE-2017-13084 ~ 13088£©£¬£¬£¬£¬£¬£¬£¬£¬ÏÖʵÉÏÕâÊ®¼¸¸öÎó²î¾ùÖ¸Ïòͳһ¸öÎÊÌâ--ÃÜÔ¿ÖØ×°¡£¡£¡£¡£¡£¡£

ÕâÀàÇ徲ȱÏݱ£´æÓÚ Wi-Fi ±ê×¼×Ô¼º£¬£¬£¬£¬£¬£¬£¬£¬¶ø·ÇÌض¨Ä³Ð©²úÆ·»òÕßʵÏּƻ®ÖС£¡£¡£¡£¡£¡£ÊµÖÊÉÏ£¬£¬£¬£¬£¬£¬£¬£¬ÎªÁË°ü¹ÜÇå¾²£¬£¬£¬£¬£¬£¬£¬£¬Ò»¸öÃÜÔ¿Ö»Ó¦¸Ã×°ÖúÍʹÓÃÒ»´Î£¬£¬£¬£¬£¬£¬£¬£¬¶øWPA2ȴûÓаü¹ÜÕâÒ»µã¡£¡£¡£¡£¡£¡£

ÂÛÎÄ¡¶Key Reinstallation Attacks:Forcing Nonce Reuse in WPA2¡·ÄÚµÄPOC(Proof of Concept)£¬£¬£¬£¬£¬£¬£¬£¬¶ÔÒ»²¿ Android ÊÖ»úÖ´ÐÐÁËÒ»´Î KRACK¡£¡£¡£¡£¡£¡£ÔÚ±¾´ÎÑÝʾÖУ¬£¬£¬£¬£¬£¬£¬£¬¹¥»÷ÕßÓÐÄÜÁ¦¶ÔÊܺ¦Õß´«ÊäµÄËùÓÐÊý¾Ý¾ÙÐнâÃÜ¡£¡£¡£¡£¡£¡£¹ØÓÚ¹¥»÷·½¶øÑÔ£¬£¬£¬£¬£¬£¬£¬£¬ÕâÒ»¹¥»÷·½·¨ºÜÊÇÒ×ÓÚʵÏÖ£¬£¬£¬£¬£¬£¬£¬£¬ÓÉÓÚAndroid ÒÔ¼° Linux »áÔÚ¹¥»÷ÕßµÄÖ¸µ¼Ï£¨ÖØУ©×°ÖÃÒ»ÌõÈ«Áã¼ÓÃÜÃÜÔ¿¡£¡£¡£¡£¡£¡£

ÂÛÎÄÒ²Ö¸³ö£¬£¬£¬£¬£¬£¬£¬£¬ÔÚ¹¥»÷ÆäËû×°±¸Ê±£¨ÎÞÈ«Áã¼ÓÃÜÃÜÔ¿Îó²îµÄ×°±¸£©£¬£¬£¬£¬£¬£¬£¬£¬ËäÈ»½âÃÜËùÓÐÊý¾Ý°üÄѶȼ«´ó£¬£¬£¬£¬£¬£¬£¬£¬µ«¹¥»÷ÕßÈÔÈ»ÓÐÄÜÁ¦½âÃÜÏ൱һ²¿·ÖÊý¾Ý°ü¡£¡£¡£¡£¡£¡£ÏÖʵÉÏ£¬£¬£¬£¬£¬£¬£¬£¬ÂÛÎÄ×÷ÕßÈÏ¿É£¬£¬£¬£¬£¬£¬£¬£¬Ëû×Ô¼º»¹Ã»ÓÐÕⲿ·Ö¹¥»÷µÄPOC¡£¡£¡£¡£¡£¡£

KRACKÎó²îµÄ¹¥»÷¹¤¾ßºÍ¹¥»÷·½·¨

¸ÃÎó²îÖ÷ÒªÊÇÕë¶Ô WiFi ½ÓÈëµÄ¿Í»§¶Ë£¨ÊÖ»ú¡¢Ìõ¼Ç±¾¡¢padµÈ×°±¸£©£¬£¬£¬£¬£¬£¬£¬£¬ÓÕ·¢¿Í»§¶Ë¾ÙÐÐÃÜÔ¿ÖØ×°£¬£¬£¬£¬£¬£¬£¬£¬´Ó¶ø´øÀ´¿ÉÄܱ»½âÃܵÄÒþ»¼£¬£¬£¬£¬£¬£¬£¬£¬±»¹¥»÷µÄÖ÷ÒªÌõ¼þÊǹ¥»÷ÕßÔÚÎïÀíλÖÃÉϺÜÊÇ¿£¿£¿£¿£¿£¿£¿¿½üÄ¿µÄ Wi-Fi ÍøÂ磬£¬£¬£¬£¬£¬£¬£¬²Å¿ÉÄܾÙÐÐÖØ×°ÃÜÔ¿ÓÕµ¼¡£¡£¡£¡£¡£¡£

¿ÉÄܵĹ¥»÷·½·¨°üÀ¨£º

• ͨ¹ýKRACKÎó²î½ÏÁ¿ÈÝÒ×´¥·¢LinuxºÍAndroid 6.0ÒÑÖªµÄÈ«ÁãÃÜÔ¿×°ÖÃÎó²î£¬£¬£¬£¬£¬£¬£¬£¬Ôì³ÉËùÓб¨ÎÄÈÝÒ×±»½âÃÜ£»£»£»£»£»£»
• KRACKÎó²î¹¥»÷Ï÷ÈõÁËWPA2¼ÓÃܶÔÖطŹ¥»÷µÄ·ÀÓù£¬£¬£¬£¬£¬£¬£¬£¬ÔöÌíÁËÖÕ¶ËÊܵ½ÖطŹ¥»÷µÄΣº¦£»£»£»£»£»£»
• ÈôÊÇÒѾ­»ñÈ¡²¿·Ö±¨ÎĵÄÃ÷ÎĺÍÃÜÎÄ£¬£¬£¬£¬£¬£¬£¬£¬Ôò¿ÉÄÜͨ¹ýKRACKÎó²î½âÃܸü¶à±¨ÎÄ£¬£¬£¬£¬£¬£¬£¬£¬µ«²»¿É½âÃÜËùÓб¨ÎÄ£»£»£»£»£»£»
• Èô²»¿É»ñÈ¡Ã÷ÎĺÍÃÜÎÄ£¬£¬£¬£¬£¬£¬£¬£¬ÀíÂÛÉϱ£´æ½âÃÜÉÙÁ¿±¨ÎĵĿÉÄÜÐÔ£¬£¬£¬£¬£¬£¬£¬£¬µ«ÄѶȼ«´ó¡£¡£¡£¡£¡£¡£

Wi-Fi ʹÓÃÕßÓ¦¸ÃÔõÑù¿´´ý¸ÃÎó²î

• ¸Ã¹¥»÷ÊÇËùÓÐÖն˳§É̶¼ÓÐÄÜÁ¦½â¾öµÄÎó²î£¬£¬£¬£¬£¬£¬£¬£¬Çë×Éѯ»òÕßÅÌÎʹٷ½Éý¼¶°æ±¾£¬£¬£¬£¬£¬£¬£¬£¬Éý¼¶ÖÕ¶Ëϵͳ°æ±¾ºó¾Í¿ÉÒÔÔ¤·À¸ÃÎó²î¡£¡£¡£¡£¡£¡£
• LinuxºÍAndroid6.0ÒÔÉÏ°æ±¾£¬£¬£¬£¬£¬£¬£¬£¬Ç뾡¿ì¸üа汾£¬£¬£¬£¬£¬£¬£¬£¬Õë¶Ô´Ë°æ±¾µÄ¹¥»÷½ÏÁ¿ÈÝÒס£¡£¡£¡£¡£¡£
• ¹ØÓÚÆäËü×°±¸¶øÑÔ£¬£¬£¬£¬£¬£¬£¬£¬¸ÃÎó²îµÄ¹¥»÷³ÉÄÚÇé¶Ô½ÏÁ¿¸ß£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÊÇÇëÀä¾²¿´´ý£¬£¬£¬£¬£¬£¬£¬£¬×èÖ¹²»ÐëÒªµÄ¿Ö»Å¡£¡£¡£¡£¡£¡£
• Îó²îÖ÷ÒªÊÇÕë¶Ô¿Í»§¶Ë£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÊǽö½öÉý¼¶AP»òÕß¼ÒÓ÷ÓÉÆ÷£¬£¬£¬£¬£¬£¬£¬£¬ÎÞ·¨×èÖ¹¸ÃÎó²î¡£¡£¡£¡£¡£¡£
• KRACKÎó²î²»»áÔì³ÉÃÜÂëй¶£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÊÇÎÞÐèÐÞ¸ÄÍøÂçÃÜÂë¡£¡£¡£¡£¡£¡£

Îó²î¶ÔAP×°±¸µÄÓ°Ïì

¶Ôstake¹ÙÍøAPÓ°Ïì½ÏС£¬£¬£¬£¬£¬£¬£¬£¬Ö»ÓÐAPÔËÐÐÔÚÒÔϽÏÉÙʹÓõÄÁ½ÖÖ³¡¾°Ï£¬£¬£¬£¬£¬£¬£¬£¬Ä¿½ñµÄÈí¼þ°æ±¾²Å»áÊÜ´ËÎó²îÓ°Ï죬£¬£¬£¬£¬£¬£¬£¬Ïà¹ØµÄ½â¾ö¼Æ»®ÈçÏ£º

• ͨ¹ý¼ÓÃÜÐźžÙÐÐWDSÇŽÓʱ£¬£¬£¬£¬£¬£¬£¬£¬·Ç¸ùÇÅAP·¢¸ø¸ùÇÅAPµÄ±¨ÎÄ¿ÉÄܱ»½âÃÜ¡£¡£¡£¡£¡£¡£½â¾öÒªÁ죺ÇëÁªÏµTACºÍ400£¬£¬£¬£¬£¬£¬£¬£¬»ñȡеIJ¹¶¡°æ±¾¡£¡£¡£¡£¡£¡£
• ¿ªÆô802.11R FT¹¦Ð§ºó£¬£¬£¬£¬£¬£¬£¬£¬ÖÕ¶ËÖÜÓÎʱ£¬£¬£¬£¬£¬£¬£¬£¬AP·¢¸øÖն˵ı¨ÎÄ¿ÉÄܱ»½âÃÜ¡£¡£¡£¡£¡£¡£ÏÖʵÉÏstake¹ÙÍøAPĬÈϹرոù¦Ð§£¬£¬£¬£¬£¬£¬£¬£¬ÒÔÊDz»ÐèÒªÌØÊâ´¦Öóͷ£¡£¡£¡£¡£¡£¡£

>>>ÓÑÇéÌáÐÑ<<<

ÔÚ¸ÃÎó²îϸ½ÚÆعâÖ®ºó£¬£¬£¬£¬£¬£¬£¬£¬Linux¡¢Î¢Èí¡¢Æ»¹ûÏà¼Ì¶¼Ðû²¼Á˲¹¶¡£¬£¬£¬£¬£¬£¬£¬£¬ÎÒÃÇÇ¿ÁÒ½¨Òé¸÷ÈËʵʱµÄ¸üÐÂ×Ô¼ºµÄϵͳ°æ±¾»òÕß×°Öò¹¶¡£¬£¬£¬£¬£¬£¬£¬£¬×èÖ¹ÏÖÔÚΪֹ£¬£¬£¬£¬£¬£¬£¬£¬Ö÷Á÷Öն˵IJ¹¶¡Ï£ÍûÈçÏ£º

• WindowsÖնˣºÎ¢ÈíÒÑÓÚ10ÔÂ10ÈÕµÄÇå¾²ÀÛ»ý¸üÐÂÖÐÐÞ¸´KRACKÎó²î¡£¡£¡£¡£¡£¡£Ç뿪ÆôWindows 10µÄ×Ô¶¯¸üУ¬£¬£¬£¬£¬£¬£¬£¬¾É°æ±¾WindowsÇëʵʱÉý¼¶µ½Windows 10¡£¡£¡£¡£¡£¡£
• iOSÖնˣºÆ»¹ûÒÑÓÚ10ÔÂ16ÈÕÐû²¼ÐÞ¸´´ËÎó²î£¬£¬£¬£¬£¬£¬£¬£¬ÇëÎüÊÕiOSÍÆË͸üС£¡£¡£¡£¡£¡£
• AndroidÖնˣºGoogle½«ÓÚ11ÔÂÐÞ¸´´ËÎó²î¡£¡£¡£¡£¡£¡£º£ÄÚ³§É̵ÄAndroidϵͳ²¢·ÇÔ­Éú£¬£¬£¬£¬£¬£¬£¬£¬ÇëÏò¸÷³§ÉÌÏàʶÇå¾²¸üÐÂÊÂÒË¡£¡£¡£¡£¡£¡£
• Linux£ºwpa_supplicantÒÑÐû²¼Ò»¸ö¸üÐÂÐÞ¸´´ËÎó²î£¬£¬£¬£¬£¬£¬£¬£¬Çëͨ¹ý°ü¹ÜÀíÆ÷¸üÐÂ×é¼þ¡£¡£¡£¡£¡£¡£

¹ØÓÚ´Ë£¬£¬£¬£¬£¬£¬£¬£¬¸÷ÈËÓÐÆäËûÒÉÎÊ£¬£¬£¬£¬£¬£¬£¬£¬»¶Ó­Öµçstake¹ÙÍøÍøÂç7*24Сʱ·þÎñÈÈÏß¡£¡£¡£¡£¡£¡£