How to Decode Radius MS-MPPE-Recv-Key

asked 2018-07-13 08:50:57 +0000

xiaohaozi0
3 ●2 ●2 ●4

updated 2018-07-16 07:29:14 +0000

Hi Here,

Could someone tell me how to Decode Radius MS-MPPE-Recv-Key in Access-Accept?

The Secret is cisco123.

The MS-MPPE-Recv-Key is as below:

93:aa:87:b2:ea:86:d4:15:3e:fe:f4:7e:0d:ec:fb:f5:8a:1a:20:d2:2b:38:b5:10:03:19:72:81:b1:17:80:0c:10:37:01:d0:17:92:e1:a4:12:4f:5b:9d:3a:ac:4b:87:ec:ce

I want to decode 802.11 for WPA2 follow the link below:

https://wirewatcher.wordpress.com/201...

answered 2018-07-13 09:38:32 +0000

Bob Jones
1481 ●2 ●171 ●22 Boston, MA

An alternative tool:

radsniff –x -I <pcap> -s <radius secret>

This comes with my freeradius package on a Linux host. It also assumes you have the packet capture. I have not seen other radius servers make the keys available via debug so a packet capture is a general solution. I also had to remove vlan tags from the frames for radsniff to work.

edit flag offensive delete link

Comments

Thanks for your reply. The MS-MPPE-Recv-Key was from the capture which captured from the Radius Server Cisco ISE.

It required 60 Points to upload the capture, so I couldn't upload it.

If you need anything, just let me know

xiaohaozi0 ( 2018-07-16 07:28:38 +0000 )edit

I can run your capture through this tool if you want, but you need to put it in a freely-available location so I can access it. Google Drive, or some other sharing tool? You can also try cloudshark.

Bob Jones ( 2018-07-16 09:23:13 +0000 )edit

thanks, May I know if there is software which could install on the Win 10? Or I can setup a freeradius on my linux server, may I know if the version and the name of your freeradius package?

xiaohaozi0 ( 2018-07-24 05:37:21 +0000 )edit

I don't know any software to do this type of decryption on Windows platforms directly. However, Linux VMs are cheap and easy.

The package I use for this radsniff tool is freeradius-utils on either Debian or RH based distros. The main package is freeradius.

Bob Jones ( 2018-07-24 12:27:58 +0000 )edit

Thanks, but I think changing the radius server is not a good way to solve my issue. I need to decode traffic for one of my co-worker, but I can't change our Radius server to Linux.

xiaohaozi0 ( 2018-07-25 01:26:43 +0000 )edit

see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

How to Decode Radius MS-MPPE-Recv-Key

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to Decode Radius MS-MPPE-Recv-Key edit

1 Answer

Comments

Your Answer

Question Tools

Stats

Related questions

How to Decode Radius MS-MPPE-Recv-Key