psk-crack1
Crack ike aggressive mode pre-shared keys
Usage
psk-crack [options]
<psk-parameters-file>
Overview
psk-crack attempts to crack IKE Aggressive Mode pre-shared keys that have previously been gathered using ike-scan with the --pskcrack option.
psk-crack can operate in two different modes:
- 1)
-
Dictionary cracking mode: this is the default mode in which
psk-cracktries each candidate word from the dictionary file in turn until it finds a match, or all the words in the dictionary have been tried.
- 2)
-
Brute-force cracking mode: in this mode,
psk-cracktries all possible combinations of a specified character set up to a given length.
Options
-
--help or -h -
Display this usage message and exit.
-
--version or -V -
Display program version and exit.
-
--verbose or -v -
Display verbose progress messages.
-
--dictionary=<f> or -d <f> -
Set dictionary file to <f>. The default is /usr/local/share/ike-scan/psk-crack-dictionary.
-
--norteluser=<u> or -u <u> -
Specify the username for Nortel Contivity cracking. This option is required when cracking pre-shared keys on Nortel Contivity / VPN Router systems. These systems use a proprietary method to calculate the hash that includes the username. This option is only needed when cracking Nortel format hashes, and should not be used for standard format hashes.
-
--bruteforce=<n> or -B <n> -
Select bruteforce cracking up to <n> characters.
-
--charset=<s> or -c <s> -
Set bruteforce character set to <s> Default is "0123456789abcdefghijklmnopqrstuvwxyz"
History
- Debian 13 (Trixie) to Debian 12 (Bookworm): the text shown here
- Debian 11 (Bullseye) to Debian 9 (Stretch)
- Debian 8 (Jessie) to Debian 5.0 (Lenny)
- Debian 4.0 (Etch) to Debian 3.1 (Sarge)
--dictionary since Debian 5.0 (Lenny);
--norteluser since Debian 5.0 (Lenny);
-d since Debian 5.0 (Lenny);
-u since Debian 5.0 (Lenny).
--md5 until Debian 4.0 (Etch);
--sha1 until Debian 4.0 (Etch);
-m until Debian 4.0 (Etch);
-s until Debian 4.0 (Etch).