openwall / openwall/john

Support GLBP MD5 Authentication

Open
#4,661 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

new format
Dominant language
C
Stars
13.6k
Forks
2.6k
PR merge metrics
No merged PRs in 30d

Description

Hello,
I've been trying to crack MD5 authentication from a GLBP cluster (a Cisco load balancing protocol) and it seems that this format is not supported by JTR.
I used pcap2john.py to try to extract GLBP MD5 hashes from a PCAP file and the script returns the following message instead of crackable hashes:
Ignoring non-MD5-chain auth type in packet 1!

It would be nice if JTR was able to crack GLBP MD5 authentication.
I've included in this message a PCAP file containing 3 packets from a GLBP cluster of 3 hosts, using MD5 authentication, where the password used is "Blabla" (without the double quotes).

I have no information about the way these hashes are generated but I feel that the algorithm is probably very similar to the one used for VRRP/HSRP.

If needed, I can provide more GLBP MD5 samples.

GLBP_MD5.zip

Regards

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with pcap2john.py and the attached GLBP_MD5.zip samples; compare the unsupported GLBP authentication with the VRRP/HSRP formats mentioned in the issue. The issue provides no algorithm details, so completion means extracting crackable hashes from the supplied GLBP packets and successfully cracking the stated password with JtR.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, python
Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.