LogoHackDB
icon of EAP_buster

EAP_buster

EAP_buster lists supported EAP methods of a RADIUS server, aiding red teams and detecting rogue WPA-Enterprise access points.

Introduction

EAP_buster

EAP_buster is a bash script designed to enumerate the EAP authentication methods supported by a RADIUS server behind a WPA-Enterprise access point. It leverages wpa_supplicant with various configurations and identities to probe the server's capabilities.

Key features:

  • EAP Method Enumeration: Discovers supported EAP methods.
  • Red Team Support: Provides insights for simulating WPA-Enterprise attacks.
  • Defensive Use: Helps detect rogue access points with broad EAP support.
  • Passive Identity Collection: Works with passively sniffed identities (e.g., using crEAP).
  • No Installation: Simple bash script, no complex setup required.

Use cases:

  • Red teams can use EAP_buster to understand the authentication landscape before launching attacks.
  • Systems administrators can identify potentially malicious access points by analyzing supported EAP methods.
  • Security researchers can use it to test the security posture of WPA-Enterprise networks.

Information

Newsletter

Join the Community

Subscribe to our newsletter for the latest news and updates