THC-pptp-bruter 0.1.4

THC-pptp-bruter is a brute force program against pptp vpn endpoints (tcp port 1723). Tested against Windows and Cisco gateways. Exploits a weakness in Microsofts anti-brute force implementation which makes it possible to try 300 passwords the second.

THC-pptp-bruter currently only supports Microsoft Window ChapV2 authentication. This method is used by almost all devices on the internet (including cisco).

ChapV1 support might be added later.

Microsoft implements some brute force protection by limiting the number of possible caller_ids to 1 per second. This tool exploits some implementation mistake by reusing the same caller_id for multiple authentication tries.

Performance:

- I got 350 passwords / second on my local network and Im running at 5 - 50 passwords / second on remote networks (depending on the latency).

Usage:

cat wordlist | ./pptp_bruter [IP]