domains / families / security / offensive-krack-fragattacks

offensive-krack-fragattacks

separate

KRACK (CVE-2017-13077..082) and FragAttacks (CVE-2020-24586..588 + 26139-26147) — key reinstallation, fragmentation, and aggregation attacks against WPA2 supplicants. Covers Vanhoef's test scripts, viability against modern patched stacks (mostly mitigated post-2021), residual unpatched embedded devices and IoT vendors, and the practical limitations of these attacks in modern engagements. Use when assessing legacy supplicants, embedded clients, or vendors with poor patch cadence.

When to use

• Assessing legacy supplicants
• Assessing embedded clients
• Assessing vendors with poor patch cadence
• Testing embedded OEM devices
• Testing old Android phones
• Testing industrial or SCADA Wi-Fi clients
• Testing Wi-Fi-enabled toys and smart bulbs

When not to use

• Assessing modern Win11, iOS 16+, Android 13+, or hostapd-2.10 stacks

Skill page

Source