How to Decode Radius MS-MPPE-Recv-Key

answered 2018-07-13 09:38:32 +0000

An alternative tool:

radsniff –x -I <pcap> -s <radius secret>

This comes with my freeradius package on a Linux host. It also assumes you have the packet capture. I have not seen other radius servers make the keys available via debug so a packet capture is a general solution. I also had to remove vlan tags from the frames for radsniff to work.

edit flag offensive delete link

Comments

Thanks for your reply. The MS-MPPE-Recv-Key was from the capture which captured from the Radius Server Cisco ISE.

It required 60 Points to upload the capture, so I couldn't upload it.

If you need anything, just let me know

xiaohaozi0 ( 2018-07-16 07:28:38 +0000 )edit

I can run your capture through this tool if you want, but you need to put it in a freely-available location so I can access it. Google Drive, or some other sharing tool? You can also try cloudshark.

Bob Jones ( 2018-07-16 09:23:13 +0000 )edit

thanks, May I know if there is software which could install on the Win 10? Or I can setup a freeradius on my linux server, may I know if the version and the name of your freeradius package?

xiaohaozi0 ( 2018-07-24 05:37:21 +0000 )edit

I don't know any software to do this type of decryption on Windows platforms directly. However, Linux VMs are cheap and easy.

The package I use for this radsniff tool is freeradius-utils on either Debian or RH based distros. The main package is freeradius.

Bob Jones ( 2018-07-24 12:27:58 +0000 )edit

Thanks, but I think changing the radius server is not a good way to solve my issue. I need to decode traffic for one of my co-worker, but I can't change our Radius server to Linux.

xiaohaozi0 ( 2018-07-25 01:26:43 +0000 )edit

see more comments

How to Decode Radius MS-MPPE-Recv-Key

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to Decode Radius MS-MPPE-Recv-Key edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to Decode Radius MS-MPPE-Recv-Key