U tweetove putem weba ili aplikacija drugih proizvođača možete dodati podatke o lokaciji, kao što su grad ili točna lokacija. Povijest lokacija tweetova uvijek možete izbrisati. Saznajte više
Here's a detailed write-up of the EAP bug that affected all Apple devices (except watchOS), CVE-2019-6203. It includes a deep dive into MSCHAPv2 https://sensepost.com/blog/2019/understanding-peap-in-depth/ … there's some code at https://github.com/sensepost/understanding-eap … too
Nice work! We wanted to study issues like this as well, but haven't found the time. Are you planning any follow-up work? :)
I am. Not sure how to approach next steps though. Because we’d need a way to scale EAP state machine tests across multiple devices. A fuzzing rig and several devices might be one way. But I’m not sure the intermediate steps to get there just yet. Any ideas?
There are techniques to extract a simplified state machine from implementations using black-box testing (with open source code available for that). Might be interesting to use that as a first step, and then use traditional fuzzing in each discovered state.
Android seems like a fun place to look - > @singe and I have talked about this bug -https://github.com/OpenSecurityResearch/hostapd-wpe/issues/25 …
hostapd-mana logs GTC creds properlyhttps://github.com/sensepost/hostapd-mana/wiki/MANA-EAP-Options-(aka-WPE)#wpe-mode …
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.
