NAME

       psk-crack - Crack IKE Aggressive Mode Pre-Shared Keys

SYNOPSIS

       psk-crack [options] <psk-parameters-file>

       <psk-parameters-file>  is a file containing the parameters for the pre-shared key cracking
       process in the format generated by ike-scan with the --pskcrack (-P)  option.   This  file
       can  contain  one  or  more entries.  For multiple entries, each one must be on a separate
       line.

       The program can crack either MD5 or SHA1-based hashes.  The type of hash is  automatically
       determined  from  the  length  of  the hash (16 bytes for MD5 or 20 bytes for SHA1).  Each
       entry in the <psk-parameters-file> is handled separately, so it is  possible  to  crack  a
       mixture of MD5 and SHA1 hashes.

       psk-crack can also crack the proprietary hash format used by Nortel Contivity / VPN Router
       systems.  When cracking Nortel format hashes, you need to specify the username of the hash
       that  you  are  cracking  with  the --norteluser (-u) option.  When cracking Nortel format
       hashes, you can only crack one hash at a time.

       By default, psk-crack will perform dictionary cracking using the default dictionary.   The
       dictionary  can  be changed with the --dictionary (-d) option, or brute-force cracking can
       be selected with the --bruteforce (-B) option.

DESCRIPTION

       psk-crack attempts to crack IKE Aggressive Mode pre-shared keys that have previously  been
       gathered using ike-scan with the --pskcrack option.

       psk-crack can operate in two different modes:

       1)     Dictionary  cracking  mode:  this is the default mode in which psk-crack tries each
              candidate word from the dictionary file in turn until it finds a match, or all  the
              words in the dictionary have been tried.

       2)     Brute-force  cracking mode: in this mode, psk-crack tries all possible combinations
              of a specified character set up to a given length.

OPTIONS

       --help or -h
              Display this usage message and exit.

       --version or -V
              Display program version and exit.

       --verbose or -v
              Display verbose progress messages.

       --dictionary=<f> or -d <f>
              Set dictionary file to <f>.  The  default  is  /usr/local/share/ike-scan/psk-crack-
              dictionary.

       --norteluser=<u> or -u <u>
              Specify  the  username for Nortel Contivity cracking.  This option is required when
              cracking pre-shared keys on Nortel Contivity / VPN Router systems.   These  systems
              use  a  proprietary  method to calculate the hash that includes the username.  This
              option is only needed when cracking Nortel format hashes, and should  not  be  used
              for standard format hashes.

       --bruteforce=<n> or -B <n>
              Select bruteforce cracking up to <n> characters.

       --charset=<s> or -c <s>
              Set       bruteforce       character      set      to      <s>      Default      is
              "0123456789abcdefghijklmnopqrstuvwxyz"

AUTHOR

       Roy Hills <Roy.Hills@nta-monitor.com>

                                        February 14, 2005                            PSK-CRACK(1)