Indirect signs of PSK being changed
#1
What are indirect ways to tell if PSK has been changed since the time we captured handshake? Any side-channel signs maybe? 

For example, failed eapols with stations known to previously successfully connect to particular access point could service as one of such markers. Although this one is pretty direct (as much as probabilistic) but it can be utilized in automated way to inform Charlie that he should maybe update capture and start over.

Anything else? Could be implementation-dependant, any knowledge appreciated.
Reply


Messages In This Thread
Indirect signs of PSK being changed - by fromdusktillpwn - 04-04-2020, 03:57 AM