Kerberos Password Sniffing

Paul Vixie vixie at as.vix.com
Sun Dec 1 12:16:03 EST 2002


nectar at celabo.org ("Jacques A. Vidrine") writes:

> > I know that Jack the Ripper has code available to work against an AFS
> > kaserver database, but I don't know about Kerberos v5.  
> 
> It is trivial to write additional code for Jack the Ripper to crack
> Kerberos 5 passwords (either from a KDC database or collected as
> mentioned above) --- less than two hours work.

it's not trivial if the programmer is old and slow and doesn't know the
kerberos api.  since it's so trivial, would you mind sharing yours?
-- 
Paul Vixie



More information about the Kerberos mailing list