Microsoft pptp vpn vulnerabilities Exploits in Action

Exploit 4 Details
Name: 
PPTP Attack #4 using Anger.c against MS-CHAP Version 1
Variants
: ntpptp.c, deceit.c, L0phtcrack or Crack with appropriate 
extensions
Operating Systems:
All PPTP clients and servers that use MS-CHAP 
version 1
Protocols/Services:
PPTP, MS-CHAPv1, LANMAN
Brief Description:
Attacker is easily able to “sniff” much of the PPTP 
client and server handshake information as well as the actual LANMAN hashes. 
Attack script can quickly parses out the relevant information to make it easy to 
dump into L0phtcrack or other comparable password cracking tools.
Description of Variants:
Anger is based partially on some of the contributions 
made by it’s predecessors deceit.c & ntpptp.c, and is very simple to use.
Protocol Description:
Due to weaknesses in the MS PPTP & MSCHAP 
version 1 technologies, theses scripts can quickly crack the user’s login 
information.