Support GLBP MD5 Authentication
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 13.6k
- Forks
- 2.6k
- PR merge metrics
- No merged PRs in 30d
Description
Hello,
I've been trying to crack MD5 authentication from a GLBP cluster (a Cisco load balancing protocol) and it seems that this format is not supported by JTR.
I used pcap2john.py to try to extract GLBP MD5 hashes from a PCAP file and the script returns the following message instead of crackable hashes:
Ignoring non-MD5-chain auth type in packet 1!
It would be nice if JTR was able to crack GLBP MD5 authentication.
I've included in this message a PCAP file containing 3 packets from a GLBP cluster of 3 hosts, using MD5 authentication, where the password used is "Blabla" (without the double quotes).
I have no information about the way these hashes are generated but I feel that the algorithm is probably very similar to the one used for VRRP/HSRP.
If needed, I can provide more GLBP MD5 samples.
Regards
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with pcap2john.py and the attached GLBP_MD5.zip samples; compare the unsupported GLBP authentication with the VRRP/HSRP formats mentioned in the issue. The issue provides no algorithm details, so completion means extracting crackable hashes from the supplied GLBP packets and successfully cracking the stated password with JtR.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c, python
- Domain
- networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100