Hashes from freeradius-wpe
#1
Hello everyone!

I have been experimenting with using freeradius-wpe to collect credentials from WPA enterprise wireless set ups.

the patched radius server is giving me the hashes in the following format:

Code:
mschap: Mon Aug 26 21:17:42 2013

    username: bob
    challenge: a4:15:00:1c:d5:90:0a:32
    response: 63:2e:80:34:15:16:2e:36:65:22:63:79:9f:8e:8a:1c:05:a6:bc:4d:0e:cf:5d:72
    john NETNTLM: bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72


I've tried to convert this into a hashcat friendly format but I'm not getting it to work.

Can anyone point me in the right direction? I'd love to use my GPU on these!
Reply
#2
(08-28-2013, 03:59 PM)fuzztester Wrote: bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72

I was just looking at this myself this morning. The hash just needs some flipping around:

perl -ne '/(.*?):\$.*?\$(.*?)\$(.*)/; print "$1::::$3:$2\n";'

I haven't tested this with users specified like DOMAIN\user yet. I'm not sure if the domain needs to be moved to the 3rd field or not but it works on the above test case.
Reply
#3
(08-28-2013, 04:15 PM)rajak Wrote:
(08-28-2013, 03:59 PM)fuzztester Wrote: bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72

I was just looking at this myself this morning. The hash just needs some flipping around:

perl -ne '/(.*?):\$.*?\$(.*?)\$(.*)/; print "$1::::$3:$2\n";'

I haven't tested this with users specified like DOMAIN\user yet. I'm not sure if the domain needs to be moved to the 3rd field or not but it works on the above test case.

Thank you! I was overlooking the obvious! Works like a champ!
Reply
#4
cool stuff, moved to user contributions
Reply
#5
Can someone explaine a bit more what thist line does ?
perl -ne '/(.*?):\$.*?\$(.*?)\$(.*)/; print "$1::::$3:$2\n";'

if i have a txt file named crack.txt with only bob:$NETNTLM$a415001cd5900a32$632e803415162e36652263799f8e8a1c05a6bc4d0ecf5d72
how should i use it with the perl command ?
Reply