r209: attack_cowpatty fails to find PMK

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Use pyrit to generate a new cowpatty file:
   pyrit -e 2WIRE972 -i sort/40/40.txt -o 2WIRE972_40.cow passthrough
   Note: file 40.txt is a small file of passphrases.
2. Use pyrit against the cowpatty file:
   pyrit -e 2WIRE972 -i 2WIRE972_40.cow -r 2WIRE972/2WIRE972_4way.cap
attack_cowpatty
3. Observe pyrit runs to completion without find the passphrase, even when
it has been cooked into the .cow file.
4. Verify the .cow file does in fact contain the PMK by running cowpatty(v4.6):
   cowpatty -s 2WIRE972 -d 2WIRE972_40.cow -r 2WIRE972/2WIRE972_4way.cap
   Note the correct passphrase was placed at the bottom of file 40.txt, and
then 1 up from the bottom, both times pyrit could not find it in the .cow file.
5. Find all files attached below. Please investigate.

What is the expected output? What do you see instead?
Pyrit should find my passphrase.

What version of the product are you using? On what operating system?
r209 on BT4pre-final

Please provide any additional information below.
Just hoping to make pyrit robust and very useful for myself and your user
base. We admire and enjoy your work, please keep it up!

My BT4pre-final box is a dual-core AMD machine with GTX-295 installed.

Original issue reported on code.google.com by cpmitc...@gmail.com on 10 Feb 2010 at 4:17

[GoogleCodeExporter]

Location of 2WIRE972.cow: http://www.megaupload.com/?d=NBSX8U62

Location of 2WIRE972_4way.cap: http://www.megaupload.com/?d=3YC094H9

Original comment by cpmitc...@gmail.com on 10 Feb 2010 at 4:41

[GoogleCodeExporter]

Oh yeah, sorry, my PMK is:
helium02

Original comment by cpmitc...@gmail.com on 10 Feb 2010 at 4:42

[GoogleCodeExporter]

This is a serious problem. I am - however - not able to reproduce. Cowpatty 4.6
complains about an incomplete handshake, even in "non-strict" mode...

Please doublecheck that the file "2WIRE972_4way.cap" actually contains a 
workable
handshake

Original comment by lukas.l...@gmail.com on 10 Feb 2010 at 8:13

[GoogleCodeExporter]

I've been able to reproduce the problem with aircrack-ng.

I'll look into it, thanks for reporting.

Original comment by lukas.l...@gmail.com on 10 Feb 2010 at 12:34

• Changed state: Accepted
• Added labels: Priority-Critical
• Removed labels: Priority-Medium

[GoogleCodeExporter]

Fixed in r210.

Can I include a stripped version of the capture-file you posted in Pyrit's 
standard-test?

Original comment by lukas.l...@gmail.com on 10 Feb 2010 at 4:39

• Changed state: Fixed

[GoogleCodeExporter]

Thanks!

Yes, go ahead and include my .cap file as part of your distro. It is afterall my
access point and my password ... which will have to be changed :)

Original comment by cpmitc...@gmail.com on 10 Feb 2010 at 6:23

[GoogleCodeExporter]

Original comment by lukas.l...@gmail.com on 22 Feb 2010 at 7:02

Attachments:

• 2WIRE972_4way.cap