Date: Sun, 18 Nov 2012 22:19:54 +0530 From: Dhiru Kholia <dhiru.kholia@...il.com> To: john-dev@...ts.openwall.com Subject: krb-ng format and krbng2john.py Hi, krbng2john.py can (in combination with tshark) produce JtR compatible input from .pcap files. Usage: 1. tshark -r capture.pcapng -T pdml > ~/capture.pdml 2. krbng2john.py ~/capture.pdml 3. Run john on the output of step 2 ✗ ../run/john -fo:krb5ng -t # 1 core running slower PBKDF2 code Benchmarking: MS Kerberos 5 AS-REQ Pre-Auth aes256-cts-hmac-sha1-96 [32/64]... DONE Many salts: 157 c/s real, 157 c/s virtual Only one salt: 156 c/s real, 156 c/s virtual Note: krbng2john.py requires lxml package to be installed. magnum, I think that the input format for this format is pretty much fixed now. -- Cheers, Dhiru View attachment "krb-ng_fmt_plug.c" of type "text/x-csrc" (14889 bytes) Download attachment "krbng2john.py" of type "application/octet-stream" (2240 bytes)
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.