[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CANO7a6zyh9Rfs5TYxV1nWuoVwxv-UBJj7gA1kwshh+r-KUEjGA@mail.gmail.com>
Date: Wed, 29 Aug 2012 17:45:55 +0530
From: Dhiru Kholia <dhiru.kholia@...il.com>
To: john-users@...ts.openwall.com
Subject: Re: Is there any patch to crack MySQL Network auth?
On Sat, Aug 25, 2012 at 8:32 PM, Dhiru Kholia <dhiru.kholia@...il.com> wrote:
> On Wed, Aug 22, 2012 at 9:02 PM, Richard Miles
> <richard.k.miles@...glemail.com> wrote:
>> I have a few MySQL network authentication hashes (SHA1 + challenge), but I
>> can't find a option to crack it with John. There is a patch (even if
>> unofficial) to crack it?
>
> I have added support for cracking MySQL network authentication hashes
> to JtR. Use latest code from
> https://github.com/magnumripper/magnum-jumbo
>
> However, I could not find a open-source software for obtaining
> "challenge + hash" from a network capture. I had to use Cain & Abel.
I could not find an option to export captured hashes in Cain & Abel.
So I submitted a patch for Ettercap to support sniffing MySQL v5.xx
authentication traffic. This patch outputs captured authentication
data in JtR compatible format. This functionality will be available in
v0.7.5 of Ettercap.
You can test this new feature by running code from
https://github.com/Ettercap/ettercap/tree/ettercap_rc
--
Cheers,
Dhiru
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
