Gabriel Ryan

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 3: OWE Nearly Indistinguishable From Open Wireless In Terms of Risk

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s Enhanced Open — Part 2: Understanding OWE

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…

Research & Tradecraft

War Never Changes: Attacks Against WPA3’s “Enhanced Open” — Part 1: How We Got Here

In early 2019, myself and fellow Denver-based researcher Steve Darracott (@theDarracott) set out to answer the question — “is Opportunistic Wireless…

Research & Tradecraft

Modern Wireless Tradecraft Pt IV — Tradecraft and Defensive Strategy

We’ve gone over a lot of information in the last three sections of this writeup. In case you missed them,…

Research & Tradecraft

Modern Wireless Tradecraft Pt III — Management Frame Access Control Lists (MFACLs)

In Part II of this series, we described how improvements in wireless client security have put a dent in our…

Research & Tradecraft

Modern Wireless Tradecraft Pt II — MANA and Known Beacon Attacks

In Part I of this series, we went over some 802.11 fundamentals and described how the roaming and network selection…

Research & Tradecraft

Modern Wireless Tradecraft Pt I — Basic Rogue AP Theory — Evil Twin and Karma Attacks

Introduction The past few years have seen some exciting developments in the subtle art of forcing wireless devices to connect…