WiFi password strength verification method and device

Abstract

The invention discloses a WiFi password strength verification method and device, and the method comprises the steps: capturing a WiFi handshake packet, extracting a password hash value in the WiFi handshake packet, and comparing the password hash value with a predefined password strength library, thereby evaluating the WiFi password strength and generating a safety report. The method does not need to obtain the plaintext password of the WiFi of the user, guarantees the privacy of the user, has the characteristics of high efficiency, comprehensiveness and user friendliness, and is suitable for units and individuals with high information security requirements.

Description

Technical Field

[0001] The present invention relates to the field of password security, and in particular to a WiFi password strength verification method and device. Background Art

[0002] In the information age, with the rapid development of computer science and network technology, we have fully entered a convenient and globalized information age. Whether it is work or life, we cannot do without computer networks and smart mobile devices. Most smart mobile devices use WiFi wireless networks to transmit large amounts of data, so the strength of WiFi passwords is important to prevent other illegal users from accessing unauthorized WiFi networks. Therefore, the requirements for password strength have become a very important thing in network security.

[0003] However, ordinary users, especially home users, do not have enough knowledge about the strength of WiFi passwords and most of them use simple passwords. Simple passwords are very easy to crack for professional technicians. After cracking, if the attacker connects to the same WiFi, he can use professional technology to intercept user data, monitor user traffic information, and tamper with user's normal requests to achieve the purpose of man-in-the-middle attack. The information security of WiFi network is very important to our ordinary users, and it is also the most easily overlooked thing. How to effectively test the strength of WiFi passwords is an issue worth considering.

[0004] In response to the above problems, this method and system will effectively verify the password strength of any WiFi and issue a report to make suggestions and guarantees for the user's WiFi security, which will prevent illegal attackers from stealing, modifying, and monitoring user information due to insufficient WiFi strength of ordinary users.

[0005] In view of this, the present invention is proposed. Summary of the invention

[0006] The main purpose of the present invention is to disclose a WiFi password strength verification method and device, which is used to solve the problems existing in the prior art, such as the illegal attackers stealing, modifying, and monitoring user information due to the insufficient WiFi strength of ordinary users.

[0007] To achieve the above object, according to one aspect of the present invention, a WiFi password strength verification method is provided, and the following technical scheme is adopted: A WiFi password strength verification method includes: obtaining a WiFi list with a BISSID added, selecting a target WiFi according to the BISSID, and obtaining a data packet of the WiFi; parsing the data packet to obtain binary data, segmenting the binary data and converting it into plain text, and searching for WAP / WPA2 handshake packet information in the handshake packet; decomposing the handshake packet information, obtaining a hash ciphertext of the WiFi password of WAP / WAP2, and comparing and verifying the hash value of the hash ciphertext with the hash value of a preset WiFi password strength library to obtain a verification result.

[0008] Furthermore, the method of obtaining a WiFi list with BISSID added, selecting a target WiFi according to the BISSID, and obtaining data packets of the WiFi includes: using a wireless network card device with a promiscuous mode to obtain WiFi, and turning on network card monitoring, generating a new monitored network card after monitoring, obtaining detectable WiFi from the monitored network card, combining and adjusting the WiFi data, organizing it into JSON format for interface rendering to display the WiFi list, and adding BISSID.

[0009] Furthermore, before parsing the data packet to obtain binary data, segmenting the binary data and converting it into plain text, and searching for WAP / WPA2 handshake packet information in the handshake packet, the WiFi password strength verification method also includes: performing a blocking monitoring operation on the WiFi detected by the monitoring, and only parsing the data packet after the monitoring is completed.

[0010] Furthermore, the information of the handshake packet is decomposed to obtain the hash ciphertext of the WiFi password of WAP / WAP2, and the hash value of the hash ciphertext is compared with the hash value of the preset WiFi password strength library to obtain the comparison result, including: decomposing the information of the handshake packet, the main purpose of which is to obtain the hash ciphertext of the WiFi password of WAP / WAP2, using a conversion tool to convert the .cap handshake packet into a file that can obtain the hash value, and then extracting the specific password hash value from the file with the hash value file to obtain the WiFi password hash ciphertext.

[0011] Furthermore, the hash value of the hash ciphertext is compared and verified with the hash value of the preset WiFi password strength library, and the verification result obtained includes: the preset WiFi password strength library includes: a primary password strength library and an intermediate password strength library; first, the primary password strength library comparison is performed, and the comparison is performed using a GPU. The efficiency depends on the GPU configuration of the configured device. At the same time, a cluster configuration can be performed to increase the comparison efficiency. If the hash value of the detected WiFi password matches the primary strength library, the WiFi is determined to be a weak password WiFi and a report is generated; if the detected WiFi password fails to successfully match the primary password strength library, the intermediate password strength library comparison will be performed, and the comparison will also be performed using a GPU. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined as a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

[0012] According to another aspect of the present invention, a WiFi password strength verification device is provided, and the following technical solution is adopted: A WiFi password strength verification device includes: an acquisition module, used to obtain a WiFi list with a BISSID added, select a target WiFi according to the BISSID, and obtain a data packet of the WiFi; a parsing module, used to parse the data packet to obtain binary data, split the binary data and convert it into plain text, and search for WAP / WPA2 handshake packet information in the handshake packet; a decomposition module, used to decompose the handshake packet information, obtain the WiFi password hash ciphertext of WAP / WAP2, compare and verify the hash value of the hash ciphertext with the hash value of a preset WiFi password strength library, and obtain a verification result.

[0013] Furthermore, the acquisition module includes: a monitoring module, which is used to use a wireless network card device with a promiscuous mode to acquire WiFi, and turn on the network card monitoring. After monitoring, a new monitored network card is generated, and the detectable WiFi is obtained from the monitored network card. The WiFi data is combined and adjusted, and organized into JSON format for interface rendering to display the WiFi list, and BISSID is added.

[0014] Furthermore, the analysis module includes: a blocking module, which is used to perform a blocking monitoring operation on the WiFi detected by the monitoring, and only analyze the data packets after the monitoring is completed.

[0015] Furthermore, the decomposition module includes: a conversion module, which is used to decompose the handshake packet information, the main purpose of which is to obtain the WiFi password hash ciphertext of WAP / WAP2, use a conversion tool to convert the .cap handshake packet into a file that can obtain the hash value, and then extract the specific password hash value from the file with the hash value file to obtain the WiFi password hash ciphertext.

[0016] Furthermore, the decomposition module includes a comparison and verification module, which is used to: preset the WiFi password strength library including: a primary password strength library and an intermediate password strength library; first, the primary password strength library comparison is to be performed, and the comparison is performed using a GPU, and the efficiency depends on the GPU configuration of the configured device. At the same time, a cluster configuration can be performed to increase the comparison efficiency. If the detected WiFi password hash value matches the primary strength library, the WiFi is determined to be a weak password WiFi and a report is generated; if the detected WiFi password fails to successfully match the primary password strength library, the intermediate password strength library comparison will be performed, and the GPU will also be used for comparison. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined as a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

[0017] The present invention performs strength verification by analyzing the password hash value in the WiFi handshake packet, without obtaining the user's WiFi plain text password, thus protecting the user's privacy. Efficient detection: GPU is used to accelerate the comparison process, cluster configuration is supported, and the detection efficiency is significantly improved. Comprehensive coverage: Through multi-level comparison of primary and intermediate password strength libraries, the WiFi password strength can be comprehensively evaluated. User-friendly: WiFi password strength detection is automatically completed without affecting the normal use of users, and intuitive security reports and modification suggestions are provided. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present invention. For ordinary technicians in this field, other drawings can also be obtained based on these drawings.

[0019] Figure 1 This is a flow chart of the WiFi password strength verification method according to an embodiment of the present invention; Figure 2 This is a specific flow chart of the WiFi password strength verification method according to an embodiment of the present invention; Figure 3 This is a flowchart showing obtaining a WiFi list according to an embodiment of the present invention; Figure 4 This is a monitoring flow chart according to an embodiment of the present invention; Figure 5 This is a flow chart of obtaining a password hash value according to an embodiment of the present invention; Figure 6 A password comparison diagram according to an embodiment of the present invention; Figure 7 The present invention is a schematic diagram of the structure of a WiFi password strength verification device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0020] The embodiments of the present invention are described in detail below with reference to the accompanying drawings, but the present invention can be implemented in many different ways as defined and covered by the claims.

[0021] Figure 1 This is a flow chart of a WiFi password strength verification method according to an embodiment of the present invention.

[0022] See also Figure 1 As shown, a WiFi password strength verification method includes: S101: Obtain a list of WiFi networks to which BISSID is added, select a target WiFi network according to the BISSID, and obtain data packets of the WiFi network; S103: parsing the data packet to obtain binary data, segmenting the binary data and converting it into plain text, and searching for WAP / WPA2 handshake packet information in the handshake packet; S105: Decompose the handshake packet to obtain the hash ciphertext of the WiFi password of WAP / WAP2, and compare and verify the hash value of the hash ciphertext with the hash value of the preset WiFi password strength library to obtain a verification result.

[0023] Specifically, see Figure 2 As shown, Figure 2 This is a specific flow chart of the WiFi password strength verification method described in an embodiment of the present invention. Figure 2 The WiFi password strength verification method specifically includes the following steps: Step 20: Scan nearby WiFi; Step 21: Get basic WiFi information; Step 22: Select the WiFi you want to check; Step 23: Monitor WiFi; Step 24: Get the WiFi handshake packet; Step 25: Get the WiFi password hash value in the handshake packet; Step 26: Verify the strength of the password hash value; Step 27: Use the weak password hash value library for comparison; and issue a report if the comparison is successful; Step 28: If the comparison in step 27 fails, use the complex password hash value library for comparison. A corresponding report will be issued for both success and failure.

[0024] As a preferred embodiment, Figure 3 This is a flowchart of obtaining a WiFi list display according to an embodiment of the present invention, see Figure 3 As shown, obtaining the WiFi list display includes: Step 31: Use the device to enable network card monitoring; Step 32: Generate new network card data; Step 33: Re-acquire the detectable WiFi from the new network card; Step 34: Encode the data and convert it into plain text; Step 35: Arrange the data format and adjust it to JSON format; Step 36: Render the WiFi list.

[0025] In this embodiment, a wireless network card device with promiscuous mode is used to acquire WiFi, and network card monitoring is turned on. After monitoring, a new monitored network card is generated, and detectable WiFi is obtained from the monitored network card. The WiFi data is combined and adjusted, and organized into JSON format for interface rendering to display the WiFi list, and BISSID is added.

[0026] As a preferred embodiment, Figure 4 This is a monitoring flow chart according to an embodiment of the present invention.

[0027] See also Figure 4 As shown, the monitoring process includes: Step 41: Get the WiFi list information of the first step; Step 42: Take out the pre-assembled BISSID of each WiFi; Step 43: Use BISSID to select a specific WiFi; Step 44: Use the promiscuous monitoring network card to perform WiFi monitoring operations; Step 45: Parse the monitored data and convert it into plain text; Step 46: Look for WiFi handshake packet information.

[0028] In this embodiment, before parsing the data packet to obtain binary data, segmenting the binary data and converting it into plain text, and searching for WAP / WPA2 handshake packet information in the handshake packet, the WiFi password strength verification method also includes: performing a blocking monitoring operation on the WiFi detected by the monitoring, and only parsing the data packet after the monitoring is completed.

[0029] As a preferred embodiment, Figure 5 This is a flowchart of obtaining a password hash value according to an embodiment of the present invention. Figure 5 As shown, the process of obtaining the password hash value includes: Step 51: Get the handshake packet information; Step 52: Actively block monitoring of the detected WiFi; Step 53: Decompose the handshake packet into information; Step 54: Take out the handshake packet information and send the handshake packet to the conversion tool; Step 55: Use a conversion tool to decode the handshake packet information and convert it into a usable file; Step 56: Extract the hash value of the decoded file.

[0030] In this embodiment, the handshake packet is decomposed to obtain the WiFi password hash ciphertext of WAP / WAP2, and the hash value of the hash ciphertext is compared with the hash value of the preset WiFi password strength library to obtain the comparison result, including: decomposing the handshake packet, the main purpose is to obtain the WiFi password hash ciphertext of WAP / WAP2, using a conversion tool to convert the .cap handshake packet into a file that can obtain the hash value, and then extracting the specific password hash value from the file with the hash value file to obtain the WiFi password hash ciphertext.

[0031] As a preferred embodiment, Figure 6 This is a password comparison diagram according to an embodiment of the present invention, see Figure 6 As shown in the figure, the password comparison process includes: Step 61: Perform strength check on the obtained hash value; Step 62: Use professional comparison tools to compare with passwords of different levels; Step 63: Perform weak password comparison; Step 64: Yes, the comparison is successful; Step 65: Generate a weak password, and the process ends; Step 66: No, the comparison fails; Step 67: Perform medium-strong password comparison; Step 68: Yes, the comparison is successful; Step 70: Generate a password report, and the process ends; Step 69: No, the comparison fails; Step 71: Generate a strong password, and the process ends.

[0032] In this embodiment, it is assumed that the WiFi password strength library includes: a primary password strength library and an intermediate password strength library; first, a comparison is performed on the primary password strength library, and a GPU is used for the comparison. The efficiency depends on the GPU configuration of the configured device. At the same time, a cluster configuration can be performed to increase the comparison efficiency. If the detected WiFi password hash value matches the primary strength library, the WiFi is determined to be a weak password WiFi and a report is generated; if the detected WiFi password fails to successfully match the primary password strength library, a comparison is performed on the intermediate password strength library, and the GPU is also used for the comparison. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined to be a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

[0033] Figure 7 The present invention is a schematic diagram of the structure of a WiFi password strength verification device according to an embodiment of the present invention.

[0034] See also Figure 7 As shown, the WiFi password strength verification device includes: an acquisition module 80, which is used to obtain a WiFi list with a BISSID added, select a target WiFi according to the BISSID, and obtain a data packet of the WiFi; a parsing module 82, which is used to parse the data packet to obtain binary data, split the binary data and convert it into plain text, and search for the handshake packet information of WAP / WPA2 in the handshake packet; a decomposition module 84, which is used to decompose the handshake packet information, obtain the hash ciphertext of the WiFi password of WAP / WAP2, and compare and verify the hash value of the hash ciphertext with the hash value of the preset WiFi password strength library to obtain a verification result.

[0035] Optionally, the acquisition module 80 includes: a monitoring module, which is used to use a wireless network card device with a promiscuous mode to acquire WiFi, and turn on network card monitoring. After monitoring, a new monitored network card is generated, and detectable WiFi is obtained from the monitored network card. The WiFi data is combined and adjusted, and organized into JSON format for interface rendering to display the WiFi list, and BISSID is added.

[0036] Optionally, the parsing module 82 includes: a blocking module, which is used to perform a blocking monitoring operation on the WiFi detected by the monitoring, and only parse the data packets after the monitoring is completed.

[0037] Optionally, the decomposition module includes: a conversion module, which is used to decompose the handshake packet information, the main purpose of which is to obtain the WiFi password hash ciphertext of WAP / WAP2, use a conversion tool to convert the .cap handshake packet into a file that can obtain the hash value, and then extract the specific password hash value from the file with the hash value file to obtain the WiFi password hash ciphertext.

[0038] Optionally, the decomposition module 84 includes a comparison and verification module, which is used to: preset the WiFi password strength library including: a primary password strength library and an intermediate password strength library; first, a primary password strength library comparison is performed, and a GPU is used for the comparison. The efficiency depends on the GPU configuration of the configured device. At the same time, a cluster configuration can be performed to increase the comparison efficiency. If the detected WiFi password hash value matches the primary strength library, the WiFi is determined to be a weak password WiFi and a report is generated; if the detected WiFi password fails to successfully match the primary password strength library, an intermediate password strength library comparison will be performed, and a GPU will also be used for the comparison. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined as a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

[0039] The present invention performs strength verification by analyzing the password hash value in the WiFi handshake packet, without obtaining the user's WiFi plain text password, thus protecting the user's privacy. Efficient detection: GPU is used to accelerate the comparison process, cluster configuration is supported, and the detection efficiency is significantly improved. Comprehensive coverage: Through multi-level comparison of primary and intermediate password strength libraries, the WiFi password strength can be comprehensively evaluated. User-friendly: WiFi password strength detection is automatically completed without affecting the normal use of users, and intuitive security reports and modification suggestions are provided.

[0040] The above only describes some exemplary embodiments of the present embodiment by way of illustration. It is undoubted that, for those skilled in the art, the described embodiments can be modified in various ways without departing from the spirit and scope of the present invention. Therefore, the above drawings and descriptions are illustrative in nature and should not be construed as limiting the scope of protection of the claims of the present invention.

Claims

1. A WiFi password strength verification method, characterized in that: include: Get the WiFi list with BISSID added, select the target WiFi according to BISSID, and get the data packet of the WiFi; Parse the data packet to obtain binary data, split the binary data and convert it into plain text, and search for WAP / WPA2 handshake packet information in the handshake packet; Decompose the handshake packet to obtain the hash ciphertext of the WiFi password of WAP / WAP2, and compare the hash value of the hash ciphertext with the hash value of the preset WiFi password strength library to obtain the verification result.

2. The WiFi password strength verification method according to claim 1, characterized in that: The method of obtaining a list of WiFi networks to which a BISSID is added, selecting a target WiFi network according to the BISSID, and obtaining a data packet of the WiFi network includes: Use a wireless network card device with promiscuous mode to obtain WiFi, and turn on network card monitoring. After monitoring, a new monitored network card is generated, and detectable WiFi is obtained from the monitored network card. The WiFi data is combined and adjusted, and organized into JSON format for interface rendering to display the WiFi list, and BISSID is added.

3. The WiFi password strength verification method according to claim 2, characterized in that: Before parsing the data packet to obtain binary data, segmenting the binary data and converting it into plain text, and searching for WAP / WPA2 handshake packet information in the handshake packet, the WiFi password strength verification method further includes: The monitoring operation is blocked for the WiFi detected by the monitoring, and the data packets are analyzed only after the monitoring is completed.

4. The WiFi password strength verification method according to claim 3, characterized in that: The handshake packet is decomposed to obtain the hash ciphertext of the WiFi password of WAP / WAP2, and the hash value of the hash ciphertext is compared with the hash value of the preset WiFi password strength library to obtain the comparison result including: The main purpose of decomposing the handshake packet is to obtain the WiFi password hash ciphertext of WAP / WAP2. Use the conversion tool to convert the .cap handshake packet into a file that can obtain the hash value. Then extract the specific password hash value from the file with the hash value file to obtain the WiFi password hash ciphertext.

5. The WiFi password strength verification method according to claim 4, characterized in that: The hash value of the hash ciphertext is compared and verified with the hash value of the preset WiFi password strength library to obtain the verification result, including: The preset WiFi password strength library includes: primary password strength library and intermediate password strength library; First, we need to compare the primary password strength library. We use GPU to compare. The efficiency depends on the GPU configuration of the configured device. We can also configure the cluster to increase the comparison efficiency. If the detected WiFi password hash value matches the primary strength library, we determine that the WiFi is a weak password WiFi and generate a report. If the detected WiFi password fails to match successfully in the primary password strength library, it will be compared with the intermediate password strength library, also using GPU for comparison. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined as a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

6. A WiFi password strength verification device, characterized in that: include: The acquisition module is used to obtain the WiFi list with BISSID added, select the target WiFi according to the BISSID, and obtain the data packet of the WiFi; A parsing module is used to parse the data packet to obtain binary data, split the binary data and convert it into plain text, and search for WAP / WPA2 handshake packet information in the handshake packet; The decomposition module is used to decompose the handshake packet to obtain the hash ciphertext of the WiFi password of WAP / WAP2, and compare and verify the hash value of the hash ciphertext with the hash value of the preset WiFi password strength library to obtain the verification result.

7. The WiFi password strength verification device according to claim 6, characterized in that: The acquisition module comprises: The monitoring module is used to use a wireless network card device with promiscuous mode to obtain WiFi and turn on network card monitoring. After monitoring, a new monitored network card is generated, and the detectable WiFi is obtained from the monitored network card. The WiFi data is combined and adjusted, and organized into JSON format for interface rendering to display the WiFi list, and BISSID is added.

8. The WiFi password strength verification device according to claim 7, characterized in that: The parsing module includes: The blocking module is used to perform blocking monitoring operations on the WiFi detected by the monitoring, and only parse the data packets after the monitoring is completed.

9. The WiFi password strength verification device according to claim 8, characterized in that: The decomposition module comprises: The conversion module is used to decompose the handshake packet information. Its main purpose is to obtain the WiFi password hash ciphertext of WAP / WAP2. The .cap handshake packet is converted using a conversion tool into a file that can obtain the hash value. The specific password hash value is then extracted from the file with the hash value file to obtain the WiFi password hash ciphertext.

10. The WiFi password strength verification device according to claim 9, characterized in that: The decomposition module includes a comparison and verification module, which is used to: The preset WiFi password strength library includes: primary password strength library and intermediate password strength library; First, we need to compare the primary password strength library. We use GPU to compare. The efficiency depends on the GPU configuration of the configured device. We can also configure the cluster to increase the comparison efficiency. If the detected WiFi password hash value matches the primary strength library, we determine that the WiFi is a weak password WiFi and generate a report. If the detected WiFi password fails to match successfully in the primary password strength library, it will be compared with the intermediate password strength library, also using GPU for comparison. If the comparison is successful in the intermediate password strength library, then the detected WiFi can be determined as a medium-strength password. If the detection is not successful, it proves that the WiFi has passed the two-level detection of weak passwords and medium-strength passwords, and a strong password report can be generated.

Images