Re: Best way to capture RADIUS passwords

2012-11-12 Thread Arran Cudbard-Bell
On 12 Nov 2012, at 10:24, Øystein Gyland wrote: > On Fri, 2012-11-09 at 15:37 -0400, Chris Taylor wrote: > >> I setup tcpdump to dump to a file (tcpdump -i eth0 -n -s0 port radius >> -w rad-capture.lpc) , but when I check it out with wireshark I am >> unable to see the password (just the userna

Re: Best way to capture RADIUS passwords

2012-11-12 Thread Øystein Gyland
On Fri, 2012-11-09 at 15:37 -0400, Chris Taylor wrote: > I setup tcpdump to dump to a file (tcpdump -i eth0 -n -s0 port radius > -w rad-capture.lpc) , but when I check it out with wireshark I am > unable to see the password (just the username). Am I going about this > the wrong way? You can decry

Re: Best way to capture RADIUS passwords

2012-11-09 Thread Arran Cudbard-Bell
On 9 Nov 2012, at 20:09, Steven Staples wrote: >> Subject: Best way to capture RADIUS passwords >> >> I am migrating from one RADIUS setup that checks against a flat file with >> usernames and passwords inside it . Over to a RADIUS server with and LDAP >> backend. I have used JTR to crack most

RE: Best way to capture RADIUS passwords

2012-11-09 Thread Steven Staples
> Subject: Best way to capture RADIUS passwords > > I am migrating from one RADIUS setup that checks against a flat file with > usernames and passwords inside it . Over to a RADIUS server with and LDAP > backend. I have used JTR to crack most of the passwords but I still have > some left over that

RE: Best way to capture RADIUS passwords

2012-11-09 Thread Sallee, Stephen (Jake)
> Am I going about this the wrong way? Yes, yes you are. #1) You will REALLY want to check your local laws, you may have just committed from a class B misdemeanor to a class C felony. Here is a link for states in the US: http://www.irongeek.com/i.php?page=computerlaws/state-hacking-laws #2) It