Wi-Fi WPA

• Utilizes 802.1.x Authentication
  • Username + Password
  • Certificate
• All devices have their own set of credentials instead of a shared password
• Uses a RADIUS server to verify the credentials of each user.
• Uses Extensible Authentication Protocol (EAP)
  • Protected EAP (PEAP)
  • Tunneled Transport Layer Security (TTLS) extends the functionality of EAP
• Connection to RADIUS server uses TLS and PKI for authentication

Attacking WPA/WPA2 Enterprise

• Brute-Force the username and password
• Evil Twin/Rogue AP attack