Has anyone actually ever cracked RADIUS? Specifically an Aironet AP with AirDefense and PKI smartcard authentication… Seems impossible but thought Id ask before I start my venture.
I only have about 2 weeks in the lab and I can’t seem to find any RADIUS cracking tutorials that hold true to modern security techniques.
Just looking for suggestions or past/present trials and tribulations..
check out the josh wright presentation at shmoocon 2008, released a patch for attacking radius auth, the scenario you provided, almost for certain isn't going to work.