NAME

       psk-crack - Crack IKE Aggressive Mode Pre-Shared Keys

SYNOPSIS

       psk-crack [options] <psk-parameters-file>

       <psk-parameters-file>  is a file containing the parameters for the pre-shared key cracking process in the
       format generated by ike-scan with the --pskcrack (-P) option.  This file can contain one or more entries.
       For multiple entries, each one must be on a separate line.

       The program can crack either MD5 or SHA1-based hashes.  The type of hash is automatically determined from
       the length of the hash (16 bytes for MD5 or 20 bytes for SHA1).  Each entry in the  <psk-parameters-file>
       is handled separately, so it is possible to crack a mixture of MD5 and SHA1 hashes.

       psk-crack can also crack the proprietary hash format used by Nortel Contivity / VPN Router systems.  When
       cracking  Nortel  format  hashes, you need to specify the username of the hash that you are cracking with
       the --norteluser (-u) option.  When cracking Nortel format hashes, you can only crack one hash at a time.

       By default, psk-crack will perform dictionary cracking using the default dictionary.  The dictionary  can
       be  changed  with  the  --dictionary  (-d)  option,  or  brute-force  cracking  can  be selected with the
       --bruteforce (-B) option.

DESCRIPTION

       psk-crack attempts to crack IKE Aggressive Mode pre-shared keys that have previously been gathered  using
       ike-scan with the --pskcrack option.

       psk-crack can operate in two different modes:

       1)     Dictionary  cracking  mode:  this is the default mode in which psk-crack tries each candidate word
              from the dictionary file in turn until it finds a match, or all the words in the  dictionary  have
              been tried.

       2)     Brute-force  cracking mode: in this mode, psk-crack tries all possible combinations of a specified
              character set up to a given length.

OPTIONS

       --help or -h
              Display this usage message and exit.

       --version or -V
              Display program version and exit.

       --verbose or -v
              Display verbose progress messages.

       --dictionary=<f> or -d <f>
              Set dictionary file to <f>.  The default is /usr/local/share/ike-scan/psk-crack-dictionary.

       --norteluser=<u> or -u <u>
              Specify the username for Nortel Contivity cracking.  This option is required  when  cracking  pre-
              shared  keys  on Nortel Contivity / VPN Router systems.  These systems use a proprietary method to
              calculate the hash that includes the username.  This option is only needed  when  cracking  Nortel
              format hashes, and should not be used for standard format hashes.

       --bruteforce=<n> or -B <n>
              Select bruteforce cracking up to <n> characters.

       --charset=<s> or -c <s>
              Set bruteforce character set to <s> Default is "0123456789abcdefghijklmnopqrstuvwxyz"

AUTHOR

       Roy Hills <Roy.Hills@nta-monitor.com>

                                                February 14, 2005                                   PSK-CRACK(1)