Username / email:   Password:
or or
Exit Theater Mode

Login or register to enable this feature.

Or, compose an email to send yourself.

Share this video
  • Share via email

View by:

Got a restrictive firewall blocking sites at school or work? Evade 'em easily with your own private web proxy. Want to securely tunnel any port through an SSH session? Darren's got just the trick. Wondering how to properly use Asleap to crack MS-CHAPv2 PPTP VPN handshakes & LM Hashes? Interested in trying out neat free enterprise applications but don't feel like spending hours in a terminal? Try deploying a virtual appliance in minutes, the free and open source way.

Cracking MS-CHAPv2 PPTP VPN handshakes & LM Hashes Followup from 6x12

On episode 612 we demonstrated a tool, asleap, designed to crack MS-CHAPv2, the authentication protocol commonly found in Microsoft PPTP VPNs. The final demo was unsuccessful due to the encoding of the handshake and response sniffed by Wireshark. Viewer Sc00bz was kind enough to post a PHP script that accepts the challenge, response and username and provides you with the proper asleap command to run with the properly encoded byte sequences. Sc00bz has well documented the code, which lives now on this Hak5 forum thread. Thanks Sc00bz!

Tell your friends about this video:

School firewall evasion, secure traffic tunneling, and quickly deploying free virtual appliances!

Tuesday, November 17th, 2009

All Segments From This Episode