PSK-CRACK(1)

💖 PSK-CRACK 💖

okay bestie, gather round, because this is the manual page for psk-crack, a General Commands Manual page, and it's literally about cracking IKE Aggressive Mode Pre-Shared Keys. yes. we're doing this. 🎀

---

✨ NAME ✨

psk-crack — crack IKE Aggressive Mode pre-shared keys, no cap. 🔓

---

🌸 SYNOPSIS 🌸

psk-crack [options] <psk-parameters-file>

So like. <psk-parameters-file> is a file that has the parameters for the pre-shared key cracking process inside it, in the format that ike-scan generates when you use the --pskcrack (-P) option. 🫶

And here's the tea: that file can hold one or more entries. If there's more than one, each one has to be on its own separate line. one per line, bestie, we don't do chaos. 📝

This program can crack MD5 or SHA1-based hashes, and it figures out which one on its own — the type is automatically determined from the length of the hash:

• 16 bytes → MD5
• 20 bytes → SHA1

Every entry in <psk-parameters-file> gets handled separately, so you can totally crack a mixture of MD5 and SHA1 hashes in one go. slay. 🌈

Also, psk-crack can crack the proprietary hash format used by Nortel Contivity / VPN Router systems. When you're doing that, you need to specify the username of the hash you're cracking with the --norteluser (-u) option. And when you're cracking Nortel format hashes, you can only crack one hash at a time. one. that's it. 🙈

By default, psk-crack does dictionary cracking using the default dictionary. You can swap that dictionary out with the --dictionary (-d) option, or you can pick brute-force cracking with the --bruteforce (-B) option. choose your fighter. 💅

---

🦋 DESCRIPTION 🦋

psk-crack attempts to crack IKE Aggressive Mode pre-shared keys that you already gathered using ike-scan with the --pskcrack option. like, you gotta get them first, this is the step two. ✨

psk-crack can operate in two different modes:

1. Dictionary cracking mode — this is the default mode. psk-crack tries each candidate word from the dictionary file, in turn, until it finds a match, or until all the words in the dictionary have been tried. one by one, patiently, iconically. 💜
2. Brute-force cracking mode — in this mode, psk-crack tries all possible combinations of a specified character set up to a given length. all of them. every single one. 🫡

---

👑 OPTIONS 👑

• --help, -h — Display this usage message and exit. bye bestie 👋
• --version, -V — Display program version and exit. who are you, what era 💫
• --verbose, -v — Display verbose progress messages. she's narrating her whole journey 🎙️
• --dictionary=<f>, -d <f> — Set dictionary file to <f>. The default is /usr/local/share/ike-scan/psk-crack-dictionary. 🍓
• --norteluser=<u>, -u <u> — Specify the username for Nortel Contivity cracking. This option is required when cracking pre-shared keys on Nortel Contivity / VPN Router systems. These systems use a proprietary method to calculate the hash that includes the username. This option is only needed when cracking Nortel format hashes, and should not be used for standard format hashes. 🚫
• --bruteforce=<n>, -B <n> — Select bruteforce cracking up to <n> characters. 🔥
• --charset=<s>, -c <s> — Set bruteforce character set to <s>. Default is "0123456789abcdefghijklmnopqrstuvwxyz". 🌟

fr fr, read the --norteluser one twice. required for Nortel, and a hard do not use for standard format hashes. the vibes are specific. 💀

---

💜 AUTHOR 💜

Roy Hills <Roy.Hills@nta-monitor.com> — thank you king 🫶

---

okay that's the whole page!! 💖 this version of PSK-CRACK(1) is from the General Commands Manual and it's dated February 14, 2005 — a Valentine's Day release, which is genuinely so iconic of it. 🎀 mwah, bye bestie, go crack some pre-shared keys (responsibly, and only on stuff you're allowed to) 🌈✨