This also has an intrinsic security problem, and it is that during this time we will be “vulnerable” to an intruder connecting to our network. The other connection method is by pressing a button on the router, by pressing this button, any device that connects in a time between 60 and 120 seconds will be able to access the wireless network without the need to enter any PIN or password. However, we have found that many operator routers do not have this protection, so we could easily and quickly violate them. Some router manufacturers have incorporated into their routers a limit of unsuccessful attempts in the WPS, depending on the manufacturer and how they have programmed the firmware, we can enter the PIN about 5 times, later the router will block access to the WiFI network by WPS PIN definitively, and it can no longer be used.
Taking into account that we have 11,000 possibilities, brute force cracking is very feasible, and can be achieved in about 48 hours maximum. Finally, according to the standard, the last digit of the PIN2 serves for the checksum of the rest of the PIN, therefore, it is not a key digit but is calculated based on the other 7 digits, for this reason, the number of combinations that a WPS PIN has is only 11,000 possibilities. PIN separately, which greatly facilitates its brute force attack.
However, by the very construction of the WPS, this WPS PIN is divided into two subPINs of four digits each, therefore, the probabilities are 10,000 for the first PIN and 10,000 for the second PIN, and these can be cracked. The big problem with WPS comes with the introduction of the PIN number, because it can only have a minimum of 8 digits and at most, in this way, we would have a number of combinations of 100,000,000 possibilities.
0 kommentar(er)
