The Black Art of Wireless Post Exploitation

Wireless Enterprise Security

Most forms of WPA2-EAP have been broken for nearly a decade. EAP-TTLS and EAP-PEAP remain susceptible to evil twin attacks, yet most enterprises rely on these technologies. The secure alternative, EAP-TLS, is arduous to implement.

NAC as Compensating Control

Organizations use port-based NAC appliances to prevent attackers from pivoting after wireless compromise. This approach assumes reactive security balances security and accessibility.

Assumption Challenge

A fundamental assumption is that EAP functions exclusively as perimeter defense. The presentation challenges this through a novel rogue access point attack that bypasses port-based access control mechanisms.

Pivoting Through Wireless

The attack demonstrates that reactive wireless security approaches are inadequate alternatives to strong physical layer protections like WPA2-EAP with EAP-TLS. Organizations must implement preventive controls, not rely on network segmentation after wireless compromise.