SRP is a type of Password Authentication Key Exchange protocol which incorporates the password within key exchange calculations.
MikroTik's new authentication process uses a variation of Secure Remote Password (SRP). Margin Research is excited to illuminate the authentication procedure and offer Python proof of concept (POC) implementations for Winbox and MAC Telnet authentication. MikroTik has since failed to detail the new authentication procedure despite user requests for assistance.
While enhancing router security, this came as a blow for researchers, network administrators, and tinkerers who used customized tooling with MikroTik proprietary protocols such as MAC Telnet and Winbox.
In August 2019, MikroTik issued a RouterOS software update to version 6.45.1 which removed plaintext password storage on all routers that upgraded to the new firmware.
0 kommentar(er)
