Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 22 Aug 2012 12:01:30 -0500
From: Richard Miles <>
Subject: Re: Is there any patch to crack MySQL Network auth?

Hi Rich,

Well, I have the parsed hash and challenge from a mysql .pcap session, if
anyone is interested on it I can share.


On Wed, Aug 22, 2012 at 11:51 AM, Rich Rumble <> wrote:

> On Wed, Aug 22, 2012 at 12:14 PM, <>
> wrote:
> > Hi,
> >> I have a few MySQL network authentication hashes (SHA1 + challenge),
> but I
> >> can't find a option to crack it with John. There is a patch (even if
> >> unofficial) to crack it?
> >
> > AFAIK there is support on the jumbo patch.
> >
> > Take a look at:
> While JtR supports cracking MySQL hashes in an "offline" form, I don't
> believe there is support for a pcap or captured traffic support like
> jumbo has for VNC challenge/responses. With examples (captured
> traffic) of known passwords it's entirely possible for someone to
> create one, but as far as I know no one has done so yet.
> -rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.