Time for action – cracking PEAP

Follow the given instructions to get started:

1. We double-check the eap.conf file to ensure that PEAP is enabled:

   

2. We then restart the Radius server with Radiusd –s –X:

   

3. We monitor the log file created by FreeRadius-WPE:

   

4. Windows has native support for PEAP. Let's ensure that Certificate Verification has been turned off:

   

5. We just need to connect to the access point Wireless Lab for Windows to start PEAP authentication:

   

6. Once the client connects to the access point, the client is prompted for a User name / Password. We use SecurityTube as the User name and abcdefghi as the Password:

   

7. As soon as we do this, we are able to see the MSCHAP-v2 challenge response appear in the log file:

   

8. We now use Asleap to crack this using a password list file that contains the password abcdefghi and we are able to crack the password!

   

What just happened?

We set up our Honeypot using FreeRadius-WPE. The enterprise client is mis-configured to not use certificate validation with PEAP. This allows...