Saturday 11 August 2012

chapcrack – A tool for parsing and decrypting MS-CHAPv2 network handshakes.

chapcrack is a tool for parsing and decrypting MS-CHAPv2 network handshakes, it was announced recently at Defcon as we read over here – Marlinspike demos MS-CHAPv2 crack.
The process is as follows:





  1. Obtain a packet capture with an MS-CHAPv2 network handshake in it (PPTP VPN or WPA2 Enterprise handshake, for instance).
  2. Use chapcrack to parse relevant credentials from the handshake (chapcrack parse -i path/to/capture.cap).
  3. Submit the CloudCracker token to www.cloudcracker.com
  4. Get your results, and decrypt the packet capture (chapcrack decrypt -i path/to/capture.cap -o output.cap -n )
If you are interested in a much more in-depth, technical explanation – you can read more here:
Divide and Conquer: Cracking MS-CHAPv2 with a 100% success rate
Using this attack they have a 100% success rate of cracking DES hashes within 23~ hours.
You can download chapcrack here:
moxie0-chapcrack.zip
Or read more here.

No comments:

Post a Comment

LinkWithin

Related Posts Plugin for WordPress, Blogger...