[Silica] SILICA v7.36

[Oren Isacson]

Immunity is proud to announce the release of SILICA v7.36!

- FakeAp Mana Mode:
 The FakeAp karma option now implements the attack known as "mana":
 build a per-mac view of the proximate network list, and respond to
 broadcast probes with direct responses for each proximate network list.
 This allows to attract more client devices than the previous karma
 attack.

- EAP Relay Attack:
 When trying to connect to a network using 802.1X authentication, SILICA
 will now launch an EAP Relay Attack if the credentials are unknown.
 This attack will allow SILICA to join the network after a
 man-in-the-middle attack on a legitimate client device trying to join
 the network.

 Notes: two wireless cards are needed for this attack, and this attack
 only works on PEAP-EAP-MSCHAPv2 at this time.


Videos can be found at:
Network Printer Attacks -
https://vimeo.com/270182796
Bypassing WPA2 encryption using the KRACK attack -
https://vimeo.com/251369829
SILICA 7.31: Samba Server Exploitation -
https://vimeo.com/230656937
D-link and Microsoft WSUS Exploits -
https://vimeo.com/209259981
Fake Captive Portal Demo -
https://vimeo.com/198045435
Malicious Access Point Detection -
https://vimeo.com/177231337
Karma attack filtering and background WPA handshake sniffer -
https://vimeo.com/165882825
Access Point Mapping - https://vimeo.com/157178038
Full Karma Attack - https://vimeo.com/155393829
SMB proxy and group policy exploit - https://vimeo.com/136964755
SSL attacks using SSL stripping and self signed certificates -
https://vimeo.com/122117823
Exploiting Android WebView.addJavaScriptInterface -
http://vimeo.com/109831748
Pixie Dust WPS Attack - https://vimeo.com/130883860
More WPS attacks - https://vimeo.com/album/3385057/video/115337910
General overview -
http://www.immunityinc.com/movies/SILICA_7.5_New_Features.mov
Wireless Window -
http://www.immunityinc.com/movies/SILICA_Wireless_Window.mp4


SILICA Team