Skip to main content

Network routers with roaming enabled are likely susceptible to a new attack

Hashcat creator Jens Steube accidentally discovered a new method to break into network routers while researching new ways to attack the new WPA3 security standard. He stumbled onto an attack technique capable of cracking hashed passwords based on the Wi-Fi Protected Access Pre-Shared Key (WPA-PSK) security protocol.

For starters, WPA is a mechanism in wireless networking that encrypts and decrypts data passed between the router and a connected device. The PSK aspect applies to the network’s password or passphrase, as the router creates a unique 256-character key that is shared between both devices. These keys change periodically to prevent hackers from infiltrating the network.

In a typical attack, the hacker must be in the range of a router and a connecting wireless device, and patiently wait for the latter device to log onto the network. When the wireless device begins the connection process, the hacker must run a tool in the exact same moment to capture the full four-way “authentication handshake” made between the router and the device.

That’s not the case in the new attack. With this method, the hacker needs only a small portion of the handshake called the Robust Security Network Information Element (RSN IE). Even more, the hacker can connect directly to the router and access the needed data rather than lurk in the background and wait for someone to connect.

“At this time, we do not know for which vendors or for how many routers this technique will work, but we think it will work against all 802.11 i/p/q/r networks with roaming functions enabled (most modern routers),” Steube says.

The login aspect of connecting a wireless device to a router consists of a set number of steps or frames. The RSN IE is an optional field within one of those steps that contains the Pairwise Master Key Identifier, a networking component that verifies that both the router and wireless device know the PSK-based password. This component is the new method’s attack vector, retrieving the stored PSK-based password.

According to Steube, the attack requires three available tools: Hcxdumptool v4.2.0 or higher, Hcxtools v4.2.0 or higher, and Hashcat v4.2.0 or higher. The first tool on the list grabs the necessary connection frame and dumps it into a file. The second tool converts the saved data into a format that can be read by Hashcat. This third tool cracks the encryption.

Ultimately, this method reduces the time used to access the stored passwords but doesn’t lessen the time needed to crack the encryption protecting these passwords. The cracking duration depends on the password complexity, thus if router owners never change the password from the factory default, the password should take no time to crack.

To better protect yourself from a possible attack, change the default password on your router. Using your own password is supposedly better than allowing the router to create one for you, and always use a variety of characters: Lower and upper-case letters, numbers, and symbols. If you’re not great at remembering passwords, Steube suggests using a password manager.

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
Best Prime Day laptop deals in 2024: Surface Pro, Razer, HP, Dell
Best Prime Day Deals

Prime Day is here. We're about halfway through the first day, and we're seeing some great Prime Day deals on laptops, with some of them constituting significant discounts. Pretty much all the big brands have some sort of discount on them, including HP, Dell, Samsung, and Asus, and you can even find some excellent MacBook Prime Day deals, which is always nice to see. We've collected some of our favorite laptop deals below, but it's always worth checking out some of our other favorite roundups, such as these Prime Day 2-in-1 laptop deals and Prime Day gaming laptop deals.

Today's best laptop deals
Prime Day officially runs from July 16 to July 17. That doesn't mean the deals you're seeing today will still be around tomorrow. There is always the chance something will sell out. Deals also end on a whim. If you see something today, the smart play is to buy it now.

Read more
Best Prime Day Apple deals in 2024: AirPods, MacBooks, iPads
Best Prime Day Deals

We're about halfway through the first day of Prime Day 2024, which means most deals have already dropped. If you've been holding off buying an Apple product until some great Prime Day deals, then you'll be happy to know that this is your sign, and now is the time. Even better, it seems that Apple and other retailers are pulling out the stops when it comes to Apple's products, as we're seeing quite a few great deals across the board. We've collected some of our favorite deals below, but if you'd like to check out a few more options, be sure to check out these Prime Day MacBook deals, Prime Day smartwatch deals, and Prime Day headphones deals.
Today's best Apple deals

Amazon Prime Day 2024 is scheduled for July 16 and 17. We've rounded up our favorite Apple deals that are currently available, but you're going to have to hurry with your purchase because we're not sure how much time is remaining on these offers. There is no guarantee they will last until midnight on Wednesday.

Read more
Best Buy Prime Day Sale 2024: TV, headphone and appliance deals
Cyberpunk 2077 running on the Asus ROG Zephyrus G14.

It's July 16, and you know what that means: It's day one of Prime Day, so the deals are flowing. But Amazon is not your only source for amazing Prime Day deals today. Several other retailers are joining the sales event, and Best Buy is one of our favorite sources of Prime Day laptop deals, Prime Day TV deals, Prime Day headphone deals, and more. While you're at it, you might also check out the Walmart Prime Day deals, and Target, too. Back to Best Buy, you can find things like amazing Prime Day smart home deals, Prime Day gaming PC deals, and Prime Day gaming laptop deals. With so much to shop at Best Buy today, we thought we'd track down the best of what Best Buy has to offer for Prime Day. Read onward for all of the deals we think you should take a look at, and make a purchase if you see something you like, as there's no telling when a deal could expire.
Best Buy Prime Day laptop deals

If you're after the top-of-the-line models of the best laptops, or you want to stick to a tight budget for your next computer, there's surely something for you from the Best Buy Prime Day laptop deals that we've collected here. Whether you're planning to buy a basic laptop, or high-end laptop for professional purposes, or a gaming laptop to play the best PC games, you can enjoy huge savings if you take advantage of any of the following offers. There are even some Prime Day MacBook deals here for Apple fans.

Read more