search

sensepost / mana

*DEPRECATED* mana toolkit for wifi rogue AP attacks and MitM
https://w1f1.net/
Other
1.09k stars 275 forks source link

MSCHAPV2 domain\ prefix #22

Closed rkornmeyer closed 8 years ago

rkornmeyer commented 9 years ago

Hello,

I was wondering if the issue of 'domain\' prefixes have been addresses with the custom hostapd. see this pull request from hostapd-wpe https://github.com/OpenSecurityResearch/hostapd-wpe/pull/4 . I havent been able to confirm one way or another. Typically, if the domain\ prefix is used there is still a C/R captured but it is uncrackable due to the truncation of the domain prefix. Any clarification is appreciated.

singe commented 9 years ago

Hi, I've gone through Brad's WPE patches in detail, and asked permission to merge his changes in here. His EAP handling is better than ours in some regards, but doesn't do the auto crack 'n add. I'll spend some time hand merging them in a few days when I have some time, which should resolve this.

One thing to watch out for, is if it's a computer account, those passwords are autogenerated by the domain and very hard to crack without something like moxie's cloudcracker.

rkornmeyer commented 9 years ago

cool, also this pull request has not been merged yet. However, i have tested it and it works great.

singe commented 9 years ago

Which pull request?

Rogdham commented 8 years ago

Which pull request?

I belive @rkornmeyer is speaking about the PR on hostapd-wpe repo.

@singe: Could you look at https://github.com/sensepost/hostapd-mana/pull/2? It seems that there was a small bug in your correcting the issue.

singe commented 8 years ago

Merged in hostapd-mana

Rogdham commented 8 years ago

Merged in hostapd-mana

Perfect, thanks!