PPP over Ethernet?
John Fraizer
John.Fraizer at EnterZone.Net
Fri Jun 5 21:34:07 UTC 1998
At 05:40 PM 6/4/98 -0400, you wrote:
>> Give me 10 minutes with a sniffer and a few nifty tools and not only can I
>> find the PPTP session but, take control. Now, *I* have access to your file
>> on that NiceTry Server.
>
><http://www.counterpane.com/pptp.html> of course.
No, actually, this is a tool that a close friend wrote while working on a
test harness for the PPTP protocol. It seems that MS PPTP doesn't quite
work as advertized and it was necessary to sniff a ton of sessions to
determine the protocol and write the state machine to interface to
something other than Winblows as a client or server. I suppose that
"releasing" the crack will brings with it notoriety in the community if
that's what you're after. Personally, I find it more gratifying to know it
can be done and have the prowess to do it than to provide the code to every
bored 13y/o on the planet via anonymous ftp.
>According to my Microsoft insider, "depends what the client is. If it's
>NT and uses the NTLM hash, it's quite secure. If it's 9x and uses the
>LM hash, it's easy to crack. Basically the deal is that 9x clients use
>a shitty old hash method that's really easy to sniff and crack."
The session hijacked was NT<->NT. With 3DES/Blowfish/etc freely available,
why does MS feel the need to _attempt_ to write their own encryption?
>Supposedly there are patches that close the holes, but PPTP still doesn't
>appear to have been designed nicely to begin with.
---START PATCH.BAT---
;patch.bat
echo "Please insert Linux Bootable Installation CD in CD drive."
pause "Press <ENTER> when ready."
echo "This process may take several minutes depending on the speed of your
computer"
pause "Please press CTRL-ALT-DEL to begin the patch process..."
---END PATCH.BAT---
-------
John Fraizer (root) | __ _ |
The System Administrator | / / (_)__ __ ____ __ | The choice
mailto:root at EnterZone.Net | / /__/ / _ \/ // /\ \/ / | of a GNU
http://www.EnterZone.Net/ | /____/_/_//_/\_,_/ /_/\_\ | Generation
A 486 is a terrible thing to waste...
More information about the NANOG
mailing list