Time for action – cracking PEAP

Follow the given instructions to get started:

1. We double-check the eap.conf file to ensure that PEAP is enabled:

   

2. We then restart the RADIUS server with freeradius-wpe –s –X:

   

3. We monitor the log file created by FreeRADIUS-WPE:

   

4. Windows has native support for PEAP. Let's ensure that certificate verification has been turned off:

   

5. We need to click on the Configure tab that is next to Secured password (EAP-MSCHAP v2) and tell Windows not to automatically use our Windows logon name and password:

   

6. We will also have to force it to select User authentication in the Advanced Settings dialog box:

   

7. Once the client connects to the access point, the client is prompted for a username and password. We use Monster as the username and abcdefghi as the password:

   

8. As soon as we do this, you should be able to see the MSCHAP-v2 challenge response appear in the log file.

9. We now use asleap to crack this using a password list file that contains the password abcdefghi, and we are able to crack the...