Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 18 Nov 2012 22:19:54 +0530
From: Dhiru Kholia <>
Subject: krb-ng format and

Hi, can (in combination with tshark) produce JtR compatible
input from .pcap files.


1. tshark -r capture.pcapng -T pdml  > ~/capture.pdml

2. ~/capture.pdml

3. Run john on the output of step 2

✗ ../run/john -fo:krb5ng -t # 1 core running slower PBKDF2 code
Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth aes256-cts-hmac-sha1-96
[32/64]... DONE
Many salts:	157 c/s real, 157 c/s virtual
Only one salt:	156 c/s real, 156 c/s virtual

Note: requires lxml package to be installed.


I think that the input format for this format is pretty much fixed now.


View attachment "krb-ng_fmt_plug.c" of type "text/x-csrc" (14889 bytes)

Download attachment "" of type "application/octet-stream" (2240 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ