From oren at immunityinc.com Tue Jan 15 15:52:23 2019 From: oren at immunityinc.com (Oren Isacson) Date: Tue, 15 Jan 2019 12:52:23 -0300 Subject: [Silica] SILICA v7.36 Message-ID: <59292c6d-ad3c-4e64-9f4f-0bf72bc3db3a@immunityinc.com> Immunity is proud to announce the release of SILICA v7.36! - FakeAp Mana Mode:  The FakeAp karma option now implements the attack known as "mana":  build a per-mac view of the proximate network list, and respond to  broadcast probes with direct responses for each proximate network list.  This allows to attract more client devices than the previous karma  attack. - EAP Relay Attack:  When trying to connect to a network using 802.1X authentication, SILICA  will now launch an EAP Relay Attack if the credentials are unknown.  This attack will allow SILICA to join the network after a  man-in-the-middle attack on a legitimate client device trying to join  the network.  Notes: two wireless cards are needed for this attack, and this attack  only works on PEAP-EAP-MSCHAPv2 at this time. Videos can be found at: Network Printer Attacks - https://vimeo.com/270182796 Bypassing WPA2 encryption using the KRACK attack - https://vimeo.com/251369829 SILICA 7.31: Samba Server Exploitation - https://vimeo.com/230656937 D-link and Microsoft WSUS Exploits - https://vimeo.com/209259981 Fake Captive Portal Demo - https://vimeo.com/198045435 Malicious Access Point Detection - https://vimeo.com/177231337 Karma attack filtering and background WPA handshake sniffer - https://vimeo.com/165882825 Access Point Mapping - https://vimeo.com/157178038 Full Karma Attack - https://vimeo.com/155393829 SMB proxy and group policy exploit - https://vimeo.com/136964755 SSL attacks using SSL stripping and self signed certificates - https://vimeo.com/122117823 Exploiting Android WebView.addJavaScriptInterface - http://vimeo.com/109831748 Pixie Dust WPS Attack - https://vimeo.com/130883860 More WPS attacks - https://vimeo.com/album/3385057/video/115337910 General overview - http://www.immunityinc.com/movies/SILICA_7.5_New_Features.mov Wireless Window - http://www.immunityinc.com/movies/SILICA_Wireless_Window.mp4 SILICA Team