Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't include domain name for MSCHAPv2 challenge #2

Merged

Conversation

Rogdham
Copy link
Contributor

@Rogdham Rogdham commented Jan 14, 2016

Hello,

I wrote the initial patch for hostapd-wpe that seems to have been ported to hostapd-mana in a54258a.

As a reminder, the problem is that domain\username can be sent as the user, but only username should be considered to compute the challenge/response.

However, there was a small bug in porting the patch, and the issue is still present with the current version of hostapd-mana. This PR aims to fix it.

Feel free to come back to me if anything is unclear.

Related bug on the mana repository.

@Rogdham Rogdham force-pushed the fix-mschapv2-dont-include-domain-name branch from 4fce04d to da0f37e Compare January 14, 2016 18:42
@singe
Copy link
Contributor

singe commented Jan 15, 2016

Aah perfect. I've been trying to track this down. hostapd already had code to do this but I didn't modify our logging code. Thanks very much.

singe added a commit that referenced this pull request Jan 15, 2016
Don't include domain name for MSCHAPv2 challenge
@singe singe merged commit fd52f3e into sensepost:master Jan 15, 2016
@Rogdham Rogdham deleted the fix-mschapv2-dont-include-domain-name branch January 16, 2016 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants