Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP

Loading…

decrypt fails silently #12

Closed
ju916 opened this Issue · 1 comment

2 participants

@ju916

I finally got around checking my successfull cloudcracking result. And in fact, the NT hash is correct, I can login to the the PPTP VPN (using a patched client). But "chapcrack -decrypt" fails silently again (the same pcap, I submitted for issue #7).

$ ./chapcrack.py parse -i ../pptp-host.pcap
Got completed handshake [192.168.69.169 --> 193.99.X.Y]
Cracking K3..............
User = jutest
C1 = 4de9d...
C2 = d5e0d...
C3 = 9a441...
P = 36b29bb9b0140fc0
K3 = d9c50000000000
CloudCracker Submission = $99$NrK...=

$ ./chapcrack.py decrypt -i ../pptp-host.pcap -o ../pptp-host-decoded.pcap -n ...d9c5
Wrote 0 packets.
$ tcpdump -n -r ../pptp-host.pcap
...
07:57:02.998312 IP 193.99.X.Y > 192.168.69.169: GREv1, call 45515, seq 7, ack 6, length 83: CHAP, Success (0x03), id 111, Msg S=6E9... M=Access granted
...
07:57:03.560874 IP 192.168.69.169 > 193.99.X.Y: GREv1, call 39936, seq 13, ack 13, length 110: compressed PPP data
07:57:03.560899 IP 192.168.69.169 > 193.99.X.Y: GREv1, call 39936, seq 13, ack 13, length 110: compressed PPP data
07:57:03.560905 IP 192.168.69.169 > 193.99.X.Y: GREv1, call 39936, seq 14, ack 13, length 111: compressed PPP data
...

bye, ju

PS: I still need an invoice for the $200 - where do I file a bug report for that?

@moxie0
Owner

ae2827f should fix this, give it a shot.

@moxie0 moxie0 closed this
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.