dfm covers
 
 

Cracking MS-CHAP2

Written by Matthew Isbell


Cracking MS-CHAP2 - How Secure Is Your VPN?

MS-CHAP2 is network authentication protocol, designed by Microsoft way back in the days of NT 4.0. In fact, it is still happily working away in the background of some well-known systems such as PPTP VPN’s and WPA2 Enterprise based networks using radius for authentication. It’s been long standing knowledge the protocol has a number of fl aws, however said fl aws were often overlooked and made to appear slightly irrelevant if your password was complex enough; until a few months back when one researcher set out to change that, during this article we will be taking a closer look at some of the key fi ndings presented at this year’s BlackHat conference around the subject of cracking CHAP2 once and for all.


Up until a few months ago IT administrators around the world were safe in the knowledge that their VPNs and WPA2 enterprise based wireless networks were safe, secure and based around a long standing authentication protocol named MS-CHAP2, dreamt up by Microsoft in the earliest days of NT 4.0 and fi nally implemented as a service in the service pack 4 update.




Find out more - subscribe to DFM today and read the full article. Or if you're a subscriber, login and read the article online.


 
Please make cache directory writable.
 

Submit an Article

Call for Articles

We are keen to publish new articles from all aspects of digital forensics. Click to contact us with your completed article or article ideas.

Featured Book

Hacking the Human

Full of ideas and angles that turn day-to-day security management on its head. Hacking the Human by Ian Mann.

Meet the Authors

George Bailey

George Bailey is an IT security professional with over 15 years of experience

 

Coming up in the Next issue of Digital Forensics Magazine

Coming up in Issue 25 on sale from November 2015:


Anti-Virus Evasion
In this series of articles about penetration testing, Andy Swift sheds some light on some of the more interesting techniques, with a focus on techniques that can be combined with basic tools to take an ordinary attack that few steps further. Read More »

DDoS Protection Using Corero
In this article Dan Protich, Senior Network Engineer at Hivelocity, describes Corero’s threat defence system as an “enterprise-grade DDoS mitigation tool”. Read More »

Subscribe today


A Marriage of Bioinformatics & Data Sequencing
In this article we learn all about how the new technology that marries bioinformatics to next-generation sequencing data, is unlocking the clues provided by DNA, using biomarkers to greatly reduce the pool of suspects. Read More »

Every Issue
Plus the usual Competition, Book Reviews, 360, IRQ, Legal

Click here to read more about the next issue