Microsoft pptp vpn vulnerabilities Exploits in Action

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
53
V2 Server Challenge: D422063E18E99B997C2BBE9E48448B89
V2 Name: User (13)
192.168.50.107 <- 10.0.0.2 CHAP Challenge
Using MS-CHAP v2
192.168.50.107 <- 10.0.0.2 CHAP Responce
10.0.0.2 <- 192.168.50.107 CHAP Responce
V2 Peer Challenge: 51D3D4DDFFB41C25A8AAC04C57817C26
V2 Server Challenge: 5169981C1A52F2CA62620BF0A1141C06
V2 Name: User (13)
10.0.0.2 <- 192.168.50.107 CHAP Responce
192.168.50.107 <- 10.0.0.2 CHAP Challenge
Using MS-CHAP v2
192.168.50.107 <- 10.0.0.2 CHAP Responce
10.0.0.2 <- 192.168.50.107 CHAP Responce
V2 Peer Challenge: 74168CE95912C9FBEFB9B4CEFD566728
V2 Server Challenge: 63968A98A857169A72B6EDE4C6C24233
V2 Name: User (13)
VIRTUDOMUser (Server 10.0.0.2 Client 
192.168.50.107):0:ED000F447CC60829:0000000000000000000000000000000
00000000000000000:F4936A5D60AA1808877EB35117452DA2136CD9E17141
03DA
VIRTUDOMUser (Server 10.0.0.2 Client 
192.168.50.107):0:58811AE82E39CE8C:0000000000000000000000000000000
00000000000000000:83B5167F222E1C00CA395ABB851D2DE8B81CB22A2A
E8EDE4
VIRTUDOMUser (Server 10.0.0.2 Client 
192.168.50.107):0:0B0A0AD4BEC71469:0000000000000000000000000000000
00000000000000000:4AB0F661C93E7E1945B90AD8CFF290EBDD76ECDF54
F91564
second run again:
192.168.50.107 <- 10.0.0.2 CHAP Challenge
Using MS-CHAP v2
192.168.50.107 <- 10.0.0.2 CHAP Responce
10.0.0.2 <- 192.168.50.107 CHAP Responce
V2 Peer Challenge: 4886ED31EA8802145515D12F9C47AB27
V2 Server Challenge: 89AA665A52EC3F235536F1FA51704B61
V2 Name: User (13)
10.0.0.2 <- 192.168.50.107 CHAP Responce
192.168.50.107 <- 10.0.0.2 CHAP Challenge
Using MS-CHAP v2
192.168.50.107 <- 10.0.0.2 CHAP Responce
0

---