QuestionQ160

Attacks and Exploits

While performing an engagement, a penetration tester must break the key for a Wi-Fi network that uses WPA2 encryption. Which of the following attacks would achieve this objective?

  • A ChopChop
  • B Replay
  • C Initialization vector
  • D KRACK
Explanation

KRACK is a WPA2 key-reinstallation attack that exploits the WPA2 four-way handshake to cause reuse of cryptographic nonces. In vulnerable implementations, this can permit decryption and forgery of protected Wi-Fi traffic. ChopChop, replay, and initialization-vector attacks target WEP-era weaknesses rather than WPA2.

Community Discussion

No comments yet. Be the first to start the discussion!