Log inSign up
Mathy Vanhoef
3,576 posts
Image
user avatar
Mathy Vanhoef
@vanhoefm
Prof. @KU_Leuven | Ex-Postdoc NYU | Network Security & Crypto | FragAttacks & KRACK | bsky.app/profile/vanhoe…
Orion Arm
mathyvanhoef.com
Joined February 2011
1,563
Following
14.3K
Followers

New to X?

Sign up now to get your own personalized timeline!

Create account

By signing up, you agree to the Terms of Service and Privacy Policy, including Cookie Use.

Terms·Privacy·Cookies·Accessibility·Ads Info·© 2026 X Corp.
Don't miss what's happening
People on X are the first to know.
Log inSign up
  • Pinned
    user avatar
    Mathy Vanhoef
    @vanhoefm
    May 11, 2021
    I found some design and implementation flaws in Wi-Fi again. All Wi-Fi devices are affected. It was a long ~9 months embargo, over this time a lot of info has been collected and that info now available at fragattacks.com
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Oct 16, 2017
    Key Reinstallation Attacks: Breaking WPA2 by forcing nonce reuse krackattacks.com and see the paper at papers.mathyvanhoef.com/ccs2017.pdf
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Oct 16, 2017
    My paper Key Reinstallation Attacks: Forcing Nonce Reuse in WPA2 is now online! papers.mathyvanhoef.com/ccs2017.pdf
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Jan 8, 2018
    Finally, WPA3!! It will include a more secure handshake: "WPA3 will deliver robust protections even when users choose passwords that fall short of typical complexity recommendations" wi-fi.org/news-events/ne…
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Apr 10, 2019
    Me and @eyalr0 discovered several flaws in WPA3. Read more about it at wpa3.mathyvanhoef.com Or you can read our paper! papers.mathyvanhoef.com/dragonblood.pdf #Dragonblood
    Image
    Image
    Image
    Image
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Oct 18, 2017
    Script to test APs for KRACK attack against FT handshake (802.11r - CVE-2017-13082) is online
    Image
    GitHub - vanhoefm/krackattacks-scripts
    From github.com
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Aug 8, 2023
    New #TunnelCrack flaw can break a large majority of VPNs: we can trick a VPN into leaking traffic outside the protected VPN tunnel. Our tests indicate that this is a widespread design issue. For a demo, more details, and the USENIX Security paper, see tunnelcrack.mathyvanhoef.com
    79K
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Nov 8, 2017
    Scripts to test if clients are affected by the WPA2 #KRACK attack are now available at github.com/vanhoefm/krack… Do a new git clone!
    Image
    GitHub - vanhoefm/krackattacks-scripts
    From github.com
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Nov 2, 2017
    Honored to have received the real-world impact award :)
    Image
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Aug 2, 2019
    Me and @eyalr0 found new flaws in the WPA3 security guidelines that were *privately* created after our 1st disclosure. More details at wpa3.mathyvanhoef.com/#new and in our just accepted S&P paper. Wi-Fi standard is now being updated with proper defenses, which might lead to WPA3.1
    Image
    Image
    Image
    Image
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    Dec 28, 2017
    My presentation at Black Hat Europe about the #KRACK attack against WPA2 is now on YouTube! youtube.com/watch?v=fZ1R9R… #blackhat
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    May 13, 2018
    Some IoT devices are initialized through smartphone apps that encode the SSID and password of the Wi-Fi network in the length of broadcasted packets. Attacker can capture this and extract the password. See loccs.sjtu.edu.cn/~romangol/publ… #wisec
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    May 11, 2021
    Replying to @vanhoefm
    Also check out github.com/vanhoefm/fraga… It's test tool with 45+ test cases, a live USB image, can test both APs and clients, both home and enterprise networks, supports multiple network cards, and contains references to slides and other overview info :)
    Image
    GitHub - vanhoefm/fragattacks
    From github.com
  • user avatar
    Mathy Vanhoef
    @vanhoefm
    May 11, 2021
    Replying to @vanhoefm
    With that news out of the way: later this year I'll be starting as a professor at @KU_Leuven Exciting times ahead!