Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Sun, 18 Nov 2012 22:19:54 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-dev@...ts.openwall.com
Subject: krb-ng format and krbng2john.py

Hi,

krbng2john.py can (in combination with tshark) produce JtR compatible
input from .pcap files.

Usage:

1. tshark -r capture.pcapng -T pdml  > ~/capture.pdml

2. krbng2john.py ~/capture.pdml

3. Run john on the output of step 2

✗ ../run/john -fo:krb5ng -t # 1 core running slower PBKDF2 code
Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth aes256-cts-hmac-sha1-96
[32/64]... DONE
Many salts:	157 c/s real, 157 c/s virtual
Only one salt:	156 c/s real, 156 c/s virtual

Note: krbng2john.py requires lxml package to be installed.

magnum,

I think that the input format for this format is pretty much fixed now.

-- 
Cheers,
Dhiru

View attachment "krb-ng_fmt_plug.c" of type "text/x-csrc" (14889 bytes)

Download attachment "krbng2john.py" of type "application/octet-stream" (2240 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ