Episode 612: Hacking PPTP VPNs with ASLEAP [Discussion]

[mari1ee]

Continuing with the VPN Series, Darren discusses the inherent weaknesses in Microsoft's PPTP authentication protocol, MS-CHAPv2, and demos a Linux tool that exploits these weaknesses.

Watch or download this episode now

[BuddhaChu]

Verified by multiple download to different computers on both WinXP and OSX.

kthxbye!

[ksboyintx]

I deal with VPNs all day long. While MAN in the Middle is not easy to establish, the proof of concept does provide the team some speaking points.
Have you tried capturing the MS-CHAPS2 session between the workstation and server using TCPdump to create your pcap file? Does this still give the error in Challenge length?

very interesting, great episode, thank you!!!

[chuckles]

Originally Posted by BuddhaChu

Verified by multiple download to different computers on both WinXP and OSX.

kthxbye!

What problems are you experiencing. Not seeing any issues with the file.

What is the md5 hash for the file you downloaded. It should be:

MD5 (hak5--0612--asleap--hd720p30.h264.mp4) = e827310a0d40600648ebd3e6d13a07c8

-chuckles-

[dirkdiggler]

Cream of the crop. Keep up the good works! All i can afford is... a thank you your greatly appreciated.

[lundiex]

Hi,

Whilst watching Ep612 I had a little idea.

What would happen if you commented out that length trap and recompiled? Would this mess up the algorithm or would it still produce sane results?