Full Disclosure mailing list archives

Decrypting MPPE / PPTP network traffic


From: Alexander Perchov <alexperchov1969 () googlemail com>
Date: Wed, 17 Mar 2010 10:53:26 +0100

Note: apologies for cross posting - I hope to get more coverage this
way, because google hasn't been helping lately ;-)

I am looking for a tool that can decrypt MPPE (Microsoft
Point-to-Point Encryption) network traffic given a pcap (or any other
format really) and the correct key / NTLM hash. Is anyone aware of
such a tool - public or even private software?

Most tools (and there isn't an awful lot of them anyway!) focus on
breaking MS-CHAP(v1|v2). This seems to be an area where some
significant papers were published back in the days, but very few tools
were actually implemented and published openly!

Kind Regards,

Your friendly frustrated Alexander

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: