Hack Forums
PEAP MS-CHAPv2 - How to perform a brute force attack? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: Pentesting and Forensics (https://hackforums.net/forumdisplay.php?fid=231)
+---- Thread: PEAP MS-CHAPv2 - How to perform a brute force attack? (/showthread.php?tid=5980817)



PEAP MS-CHAPv2 - How to perform a brute force attack? - catsking - Jun 18, 2019

Hi guys, I am new on this forum but, watching your threads, I think we will see often  ✌

Now, I am trying to bypass 802.1x wired authentication.
The victim client, a Windows machine, authenticates itself using PEP MS-CHAPV2.
I inserted an HUB between the supplicant and the authenticator (HP switch with 802.1x) and this gave me the chance to capture the EAPOL frames between them.
I have all the captured data frames in a pcap file made by Wireshark.
Now, is there any way to perform a brute-force attack using my pcap file?  👹


RE: PEAP MS-CHAPv2 - How to perform a brute force attack? - Mad76e. - Jun 18, 2019

(Jun 18, 2019 07:07 AM)catsking Wrote:  Hi guys, I am new on this forum but, watching your threads, I think we will see often  ✌

Now, I am trying to bypass 802.1x wired authentication.
The victim client, a Windows machine, authenticates itself using PEP MS-CHAPV2.
I inserted an HUB between the supplicant and the authenticator (HP switch with 802.1x) and this gave me the chance to capture the EAPOL frames between them.
I have all the captured data frames in a pcap file made by Wireshark.
Now, is there any way to perform a brute-force attack using my pcap file?  👹

chapcrack. Research that! Do it on your own risk


RE: PEAP MS-CHAPv2 - How to perform a brute force attack? - catsking - Jun 18, 2019

(Jun 18, 2019 07:32 AM)YadaYadaVad Wrote:  chapcrack. Research that! Do it on your own risk

I am authorized to test everything I want, don't worry, it's a lab test  👍

Anyway I've already tried that using:

Code
chapcrack.py parse -i /path/to/capture.cap

but it seems to not return anything..did you ever tried it?  😵


RE: PEAP MS-CHAPv2 - How to perform a brute force attack? - Mad76e. - Jun 19, 2019

(Jun 18, 2019 08:13 AM)catsking Wrote:  I am authorized to test everything I want, don't worry, it's a lab test  👍

Anyway I've already tried that using:

Code
chapcrack.py parse -i /path/to/capture.cap

but it seems to not return anything..did you ever tried it?  😵

I have no idea why it doesn't work for you. However i dont use it for wired connections either.


RE: PEAP MS-CHAPv2 - How to perform a brute force attack? - catsking - Jun 21, 2019

(Jun 19, 2019 01:26 PM)YadaYadaVad Wrote:  I have no idea why it doesn't work for you. However i dont use it for wired connections either.

thank you anyway  👍