[32319] in bugtraq
UPDATE: PSK Cracking using IKE Aggressive Mode
daemon@ATHENA.MIT.EDU (Michael Thumann)
Thu Nov 6 19:25:53 2003
Content-Type: text/plain; charset="us-ascii"; format=flowed
Date: Fri, 07 Nov 2003 00:06:47 +0100
From: Michael Thumann <mlthumann@ids-guide.de>
Message-Id: <6.0.0.22.2.20031106235652.03a58e70@10.1.2.40>
Mime-Version: 1.0
To: sectools@securityfocus.com, bugtraq@securityfocus.com,
full-disclosure@lists.netsys.com
Hi,
we just release a Vulnerability scanner for the PSK Attack we've described
in april in our paper 'PSK Cracking using IKE Aggressive Mode'.
The scanner is freely available from our website:
www.ernw.de/download/ikeprobe.zip
The paper itself is available from our website too. Take a look at
www.ernw.de/download/pskattack.pdf
Today we have some advancements in the cracking tools too. Mao integrated
the PSK cracking function in his tool Cain & Abel (www.oxid.it). Cain &
Abel can crack MD5 and SHA1 based preshared keys while ikecrack can only
crack MD5 based preshared keys.
Cheers
Michael
----------------------------------------------------------------------------------------------------
Michael Thumann mlthumann@ids-guide www.ids-guide.de
Public Key available at http://www.ids-guide.de/MichaelThumann.asc
----------------------------------------------------------------------------------------------------
PGP Fingerprint:
8633 D9E3 E90E F18E A70A 6321 A8CF 6A87 EC79 7B59
----------------------------------------------------------------------------------------------------
The only secure computer is one that's unplugged, locked in a safe,
and buried 20 feet under the ground in a secret location...and i'm not
even too sure about that one
--Dennis
Huges, FBI.
