Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 18 Nov 2012 01:45:47 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: cracking passwords with a kerberos traffic dump /
 aes256-cts-hmac-sha1-96 (18)

On Sun, Nov 18, 2012 at 1:14 AM, buawig <buawig@...il.com> wrote:
> Unfortunately I was not able to crack a known password with it.
> (although your test entry with password=openwall can be cracked)
>
> In my setup the username entered on the UI differs from the 'real'
> username this can be seen in the kerberos.etype_info2.salt value which
> shows the actual username + realm = salt (KRB5KDC_ERR_PREAUTH_REQUIRED
> packet) - anyway I tried it with both versions.
>
> Could you publish a sample pcap file including the john input file based
> on that pcap file?

Sure. Use http://dl.dropbox.com/u/1522424/KerberosCaptures.tar.gz and
see attached code.

I will upload this to the wiki later on.

-- 
Cheers,
Dhiru

View attachment "krb-ng_fmt_plug.c" of type "text/x-csrc" (14190 bytes)

Powered by blists - more mailing lists

Your e-mail address:

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.