WPA2-PSK - kuyini? Uhlobo lokuphepha WPA2-PSK

Wireless LAN uxhumano manje akakwazi ngokuthi into ongavamile. Nokho, abaningi, abasebenzisi (ikakhulukazi abanikazi kumadivayisi eselula) ibhekene nenkinga onjani uhlelo Ukuvikelwa esetshenziswa: WEP, WPA, noma WPA2-PSK. Hlobo luni ubuchwepheshe, manje sibona. Nokho, amehlo kakhulu izokhokhwa ke WPA2-PSK, njengoba le ukusekelwa manje ethandwa kakhulu.

WPA2-PSK: Kuyini lokhu?

Ake sithi zisuka: kwalesi simiso kuvikelwa kwanobe ngabe nguwaphi wendawo ukuxhuma kunethiwekhi engenantambo esekelwe Wi-Fi. Ukuze izinhlelo yezintambo esekelwe amakhadi inethiwekhi ezisebenzisa ukuxhumana ngqo nge-Ethernet, ke asihlobene.

ukuphepha WiFi inethiwekhi usebenzisa WPA2-PSK ubuchwepheshe manje kakhulu 'eziphambili ". Ngisho ezinye izindlela ephelelwe yisikhathi okudinga ngemvume nephasiwedi nophenyo, kanye ezihilela ukubethela idatha ebucayi e reception kanye ne-transmission, bheka, ukusho okungenani, prattle uyingane. Nasi isizathu.

Ukuvikelwa zinhlobo

Ake uqale nge yokuthi kuze kube muva nje ephephile kakhulu uxhumano Ukuvikelwa ubuchwepheshe kubhekwa WEP isakhiwo. It is esetshenziswa ukhiye ubuqotho nge ukuxhumana okungenawaya futhi iyiphi devaysa kwaba IEEE 802. 11.

WiFi inethiwekhi nokuvikeleka WPA2-PSK isebenza isimiso cishe okufanayo, kodwa uhlola ukhiye wokufinyelela lwenzeka ngesikhathi 802. 1x ezingeni. Ngamanye amazwi, uhlelo ihlola zonke ezahlukeneyo kungenzeka.

Nokho, kukhona ubuchwepheshe amasha, ngokuthi WPA2 Enterprise. Ngokungafani WPA, inikeza hhayi kuphela siqu ukufinyelela ukhiye ucela, kodwa futhi khona iseva Ububanzi batfole. Kulokhu ezifana ukuqinisekiswa algorithm ingaqalisa kanyekanye ezimeni eziningi (isb, Enterprise futhi PSK, ngaleyo ndlela ukuba bazibandakanye AES CCMP ukubethela ezingeni).

Ukuvikelwa Basic kanye Izivumelwano zokuphepha

Kanye kokushiya esikhathini esidlule, izindlela wezokuvikela wesimanje ukusebenzisa olandelwayo efanayo. It TKIP (uhlelo Ukuvikelwa WEP, esekelwe isofthiwe olusha futhi algorithm RC4). Konke lokhu kusikisela okokufaka yesikhashana ukhiye sokufinyelela inethiwekhi.

Njengoba kuboniswe ngokusebenzisa esisebenzayo, ngokwako algorithm esikhethekile ukuxhumana okuphephile kwinethiwekhi wireless kunganikezwa. kuqala, WPA, WPA2 bese, kulekelelwa PSK (siqu ukufinyelela ukhiye) kanye TKIP (Temporal Key): Lena kungani ubuchwepheshe obusha zenzelwe. Ngaphezu kwalokho, nakhu kwahlanganiswa ukubethela idatha phakathi reception-transmission, namuhla eyaziwa ngokuthi i AES ejwayelekile.

ubuchwepheshe ephelelwe yisikhathi

Ezokuphepha Uhlobo WPA2-PSK kuyinto esanda kuqalwa. Ngaphambi kwalokhu, njengoba kushiwo ngenhla, sisebenzisa WEP uhlelo ngokuhlanganyela TKIP. Ukuvikelwa TKIP akulutho, njengendlela yokuthola okwandisa khiye kancane. Okwamanje kunenkolelo ukuthi eziyisisekelo mode sihluthulelo senza ukuba ukwandisa kusuka 40 izingcezu 128 izingcezu. Ukuphishekela konke lokhu kwenza, ungase futhi ushintshe WEP ukhiye olulodwa ezahlukene eziningana elakhiwe futhi wathumela ngokuzenzakalelayo yiseva, odala ukuqinisekiswa lomsebenzisi khona ngemvume.

Ngaphezu kwalokho, uhlelo kuhilela ukusetshenziswa yokwehlayo esiqinile yokusabalalisa ukhiye, kanye nendlela ukuqeda inkinga lokho okubizwa ngomlobokazi nokubikezela. Ngamanye amazwi, lapho, isibonelo, i-kunethiwekhi engenantambo olusebenzisa Ukuvikelwa WPA2-PSK, iphasiwedi icaciswe njengeyunithi uhlobo "123456789" ukulandelana, akunzima ukuqagela ukuthi izinhlelo ezifanayo, ugesi ukhiye kanye namaphasiwedi, bavame ukuyibiza ngokuthi i-keygen noma into efana naleyo, lapho ufaka izinombolo ezine zokuqala kungaba ngokuzenzakalelayo ukukhiqiza obune. Lapha, njengoba besho, akudingeki kuphela ukuqagela uhlobo ukulandelana esetshenziswa. Kodwa-ke kungenzeka kakade waqonda, isibonelo elula.

Kepha usuku lokuzalwa umsebenzisi iphasiwedi, it is hhayi okuxoxwe. Wena kalula kungenziwa ibalwe ngokwendlela idatha yokubhalisa efanayo in amanethiwekhi omphakathi. Ngokwabo amaphasiwedi ezinombolo yalolu hlobo angathembekile ngokuphelele. Kungcono ukusebenzisa, ndawonye izibalo, izinhlamvu, nezimpawu (ngisho kungenzeka okungavezwa lapho kushicilelwa enikeziwe inkomba inhlanganisela okhiye "hot") futhi isikhala. Nokho, ngisho nayo, ngokuhlaziya WPA2-PSK okuthwala. Lapha kubalulekile ukuchaza indlela ukusebenza ohlelweni.

Ejwayelekile Finyelela Algorithm

Manje ezimbalwa amazwi mayelana WPA2-PSK System. Kuyini ngokuya ngokoqobo? Kuyinto inhlanganisela algorithm amaningi, ngomqondo ongokomfanekiso, in the mode yokusebenza. Ake sicacise isimo nge isibonelo.

Kahle kahle, ukulandelana kwezinqubo ukubulawa ukuvikela uxhumano kanye ukubethela kolwazi ngocansi noma wathola simiswe ngalendlela lelandzelako:

WPA2-PSK (i-WPA-PSK) + TKIP + AES.

Kulokhu, lapha indima esemqoka eyadlalwa ukhiye wabelane (PSK) okungukuthi ezingu-8 kuya 63. Esinjani ukulandelana algorithm (ukuthi ukubethela kwenzeka okokuqala, noma emva ukudluliswa, noma inqubo yokusebenzisa ushintsho okungahleliwe ukhiye, nokunye. D.) Ingabe zihileleke, akunandaba.

Kodwa ngisho khona ukulondeka ukubethela uhlelo ezingeni AES 256 (ebhekisela bit sobhalomfihlo) nokugenca WPA2-PSK for kubaduni, abanekhono kule ndaba, kuyoba umsebenzi, nakuba kunzima, kodwa kungenzeka.

sengozini

Emuva ngo-2008, ngesikhathi kunesithangami sabezindaba labetibambile PacSec yethulwa inqubo evumela Hack ukuxhumana okungenawaya bese ufunda idatha ngocansi kusuka kumzila wakho kuya esibulalayo iklayenti. Kwathatha imizuzu mayelana 12-15. Nokho, i-crack postback (Client router) kanye kuhlulekile.

Iqiniso liwukuthi lapho mode QoS router, awukwazi kuphela ukufunda ulwazi ngocansi, kodwa esikhundleni salo mbumbulu. Ngo-2009, ososayensi Japanese umnikelo ubuchwepheshe evumela ukunciphisa isikhathi esisodwa ngomzuzu ikhefu. Futhi ngo-2010 kwaba khona ulwazi mayelana Web wukuthi indlela elula ukuba singangeni ngenkani module 196 Hole ekhona WPA2, usebenzisa ukhiye ayo yangasese.

Mayelana noma yikuphi ukuphazamiseka e okhiye elakhiwe asikhulumi. Okokuqala okuthiwa kuhlasela isichazamazwi, ngokuhlanganiswa "isilo esinonya-force", bese ukuskenwa isikhala engenantambo ukubamba amaphakethe kokuba ngocansi futhi ukurekhoda yabo okwalandela. Engingakusho nje umsebenzisi ukwenza ukuxhumana, efana lokhu kwenzeka ke igunya ukucabhela kokuqala ukudluliswa iphakethe (ukuxhawula). Ngemva kwalokho, ngisho ekutholeni eduze main yokufinyelela liyadingeka. Ungakwazi senza umsebenzi kwimodi okungaxhunyiwe. Nokho, ukuze sifeze wonke lezi zinyathelo uzodinga isofthiwe ekhethekile.

Indlela ukwambula WPA2-PSK?

Ngenxa yezizathu ezisobala, kukhona algorithm okuphelele ngenxa yokwephula uxhumano ngeke unikelwe ngoba ingasetshenziswa njengendlela uhlobo umhlahlandlela esenzweni. Gxila kuphela amaphuzu ayinhloko, bese - kuphela ngokuya jikelele.

Ngokuvamile, ne ukufinyelela ngqo router zingaphendulwa zibe yizindawo yokuhlanganela okuthiwa imodi Airmon-NG ngomkhondo traffic (airmon-ng uqale wlan0 - ekuqambeni kabusha adaptha okungenantambo). Ngemva kwalokho, nesithuthwane nenkanuko edlulele zenzeka nomyalo traffic airdump-ng mon0 (idatha isiteshi ethungatha beacon isilinganiso, isivinini kanye indlela ukubethela, umthamo kwemininingwane ngocansi kanye nokunye. D.).

Ngaphezu kwalokho isebenze umyalo akhethiwe nenkanuko edlulele isiteshi whereupon umyalo zolimo Aireplay-NG Deauth amanani ehambisana (basuke akuboniswa ngenxa yezizathu sokusebenza ukusebenzisa izindlela ezinjalo).

Ngemva kwalokho (lapho umsebenzisi usevele wadlula ukuqinisekiswa lapho yokuxhuma) umsebenzisi angakwazi umane unqamula inethiwekhi. Kulokhu, lapho kabusha ngokufaka kusukela Hacks ohlangothini ohlelweni ukuphinda ukugunyazwa okokufaka, ngemva kwalokho-ke sizokwazi ukubamba wonke amaphasiwedi. Okulandelayo kukhona iwindi nge "izandla» (ukuxhawula). Ungabese isicelo kwethulwa ifayela WPAcrack ekhethekile qhahaza yimuphi iphasiwedi. Ngokwemvelo, njengoba kuba yayo ekuqaleni-up, futhi akekho owayezobhekwa bangatsheli muntu cha. Siphawula kuphela khona ulwazi oluthile lonke inqubo ithatha kusuka imizuzu eminingana kuya ezinsukwini ezimbalwa. Ngokwesibonelo, Intel level processor ezisebenza ngesikhathi okuzisholo iwashi imvamisa 2.8 GHz, ukusisingatha amaphasiwedi kungekho kuka-500 ngomzuzwana, noma ama ngehora-1.8 million. Ngokuvamile, kuyacaca, akufanele badukise thina.

esikhundleni isiphetho sendaba

Yilokho konke kuza WPA2-PSK. Ayini amandla layo, mhlawumbe, ukufunda lokuqala kucacile futhi ngeke. Noma kunjalo, izisekelo yokuvikelwa kokwaziswa futhi ukubethela izinhlelo esetshenziswa, ngiyacabanga, baqonde umuntu. Ngaphezu kwalokho, namuhla, ebhekene nale cishe bonke abanikazi yezinto zobuchwepheshe mobile. Ever waphawula ukuthi uma udala ukuxhumana okusha okufanayo smart phone system inikeza ukusebenzisa uhlobo oluthile ukuvikeleka (WPA2-PSK)? Abantu abaningi bamane nje bamshaya indiva kukho, kodwa kwanhlanga zimuka nomoya. In the izilungiselelo eziphambili ungasebenzisa eziningana impela imingcele engeziwe ukuze uthuthukise ukuvikeleka.