WPA2 preshared key brute force attack

9th Aug, 2018 | Security

It has come to our attention that a new way of brute force attack based on WPA2 standard using PMKID has come to light.

This attack actually is a brute force attack on WPA2 preshared key. The reason this attack is considered effective is because it can be performed offline… Full story

Web service vulnerability

30th May, 2018 | Security

This post summerizes the facts around the www service vulnerability in RouterOS which was published by Wikileaks as part of the Vault 7 document release. The vulnerability affected the RouterOS webfig configuration interface, if no firewall was put in place to protect it. MikroTik fixed the vulnerability in the… Full story

Winbox vulnerability

25th Mar, 2018 | Security

This post summerises the Winbox server vulnerability in RouterOS, discovered and fixed in RouterOS on April 23, 2018. Note that although Winbox was used as point of attack, the vulnerabilitty was in RouterOS. How it works: The vulnerability allowed a special tool to connect to the Winbox port, and request… Full story