[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <552FA1BD.7020504@borrmann.syss.de>
Date: Thu, 16 Apr 2015 13:49:17 +0200
From: Micha Borrmann <johnusers@...rmann.syss.de>
To: john-users@...ts.openwall.com
Subject: NTLM proxy auth
Hello,
I've captured authentication data to a proxy with NTLM authentication, like
GET /dummy HTTP/1.0
Host: www.dummy.net
Proxy-Authorization: NTLM TlRMTVNTUAABAAA...AAAAAAA=
...
HTTP/1.1 407 Proxy Authentication Required ( Access is denied. )
Via: 1.1 PROXY
Proxy-Authenticate: NTLM TlRMT...LmWHfQAQAAAAA=
...
GET /dummy HTTP/1.0
Host: www.dummy.net
Proxy-Authorization: NTLM TlRMTVNTUAA...FoAAADsAOw=
I have the data in pcap (or txt) file. How I can convert it to use it
with JtR? I've tried https://github.com/psychomario/ntlmsspparse but
with it only one value could be extracted but there are more in my data.
I've tried to use several pcap files for each data stream, but it
doesn't help. Any hints?
Thanks!
Micha
Powered by blists - more mailing lists
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
