He then explains how all the parameters in the handshake except the md4 hash of the password can be found as it is either know or sent in plaintext. He then gives a quick explaination about the MS-CHAP v2 handshake. He then explains how many of the VPN providers support PPTP, giving a specific example about Ipredator which only supports PPTP. PPTP and WPA 2 Enterprise (which is used by the Defcon wi-fi network) both depend on MS-CHAP v2 protocol. The speaker talks about how the previous research has shown that the security of the protocol is based on the password of the user.
This talk was mainly about pointing out the vulnerabilities in the MS-CHAP v2 protocol. Defeating PPTP VPNs and WPA2 Enterprise with MS-CHAPv2
0 kommentar(er)
