Description: Welcome to Part 31 of the WLAN Security Megaprimer! Please start this series by watching Part 1 http://www.securitytube.net/video/1756, if you have not done so already.
In this video, we will look at how to crack EAP-MD5 using the tools Eapmd5pass and Eapmd5crack. Before we begin, we will understand why EAP-MD5 cannot be used as a preferred Wi-Fi authentication scheme with WPA-Enterprise - does help in key generation post authentication, no mutual authentication, vulnerable to dictionary attacks.
Then we will move on to understand how the MD5 hash is created from the challenge sent by the Radius sever and the password, and how this process can be cracked to find the password.
We will finally do a live demo of the entire process of cracking the password using a captured EAP-MD5 exchange using both Eapmd5pass and Eapmd5crack.
Look forward to your comments!