Exploitation Summary
EIP tracks 1 public exploit for CVE-2013-4579. PoCs published by Mathy Vanhoef.
AI-analyzed exploit summary This exploit leverages a bit-flipping technique to disclose the original MAC address of a target device by injecting probe packets and monitoring ACK responses. It uses Scapy to craft and sniff 802.11 frames, exploiting the Linux kernel's handling of wireless frames to leak sensitive information.
Description
The ath9k_htc_set_bssid_mask function in drivers/net/wireless/ath/ath9k/htc_drv_main.c in the Linux kernel through 3.12 uses a BSSID masking approach to determine the set of MAC addresses on which a Wi-Fi device is listening, which allows remote attackers to discover the original MAC address after spoofing by sending a series of packets to MAC addresses with certain bit manipulations.
Exploits (1)
This exploit leverages a bit-flipping technique to disclose the original MAC address of a target device by injecting probe packets and monitoring ACK responses. It uses Scapy to craft and sniff 802.11 frames, exploiting the Linux kernel's handling of wireless frames to leak sensitive information.