Quantcast
Channel: hashcat Forum - All Forums
Viewing all articles
Browse latest Browse all 7691

Kerberos

$
0
0
Good day, everyone!

I work with Kerberos authentication using wireshark to capture packets with information in it.
I want to hashcat Kerberos hashes, but have some problems with the template.

For example
 
Kerberos 5 AS-REQ Pre-Auth etype 23     
$krb5pa$23$user$realm$salt$4e751db65422b2117f7eac7b721932dc8aa0d9966785ecd958f971f622bf5c42dc0c70b532363138363631363132333238383835

This is an example from hashcat website.

The first question: $krb5pa - so in my wireshark traffick the field will be different? or i should leave it in that way?

The second question: $23 - what is this? should i find in packets another value? Look at the attachment, i have maybe different value? should i put 18 in the template?
.png   application2.png (Size: 85.13 KB / Downloads: 1)

To take the information for the template i have to look it up in this packets.
.png   application1.png (Size: 15.38 KB / Downloads: 0)
Which of the packet should i take?

Well, i try to find the answer, looking in one of them.
Look please at the attachment and answer the questions.

.png   application3.png (Size: 72.24 KB / Downloads: 0)
and the last question: What field should i take as the hash?

Please help me with my problem.

Viewing all articles
Browse latest Browse all 7691

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>