EAP_buster
EAP_buster is a bash script designed to enumerate the EAP authentication methods supported by a RADIUS server behind a WPA-Enterprise access point. It leverages wpa_supplicant
with various configurations and identities to probe the server's capabilities.
Key features:
- EAP Method Enumeration: Discovers supported EAP methods.
- Red Team Support: Provides insights for simulating WPA-Enterprise attacks.
- Defensive Use: Helps detect rogue access points with broad EAP support.
- Passive Identity Collection: Works with passively sniffed identities (e.g., using crEAP).
- No Installation: Simple bash script, no complex setup required.
Use cases:
- Red teams can use EAP_buster to understand the authentication landscape before launching attacks.
- Systems administrators can identify potentially malicious access points by analyzing supported EAP methods.
- Security researchers can use it to test the security posture of WPA-Enterprise networks.