hacktricks/src/network-services-pentesting/1723-pentesting-pptp.md

23 lines
840 B
Markdown
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# 1723 - Pentesting PPTP
{{#include ../banners/hacktricks-training.md}}
## 基本信息
**点对点隧道协议 (PPTP)** 是一种广泛用于 **远程访问** 移动设备的方法。它利用 **TCP 端口 1723** 进行密钥交换,而 **IP 协议 47**(通用路由封装,或 **GRE**)用于加密在对等方之间传输的数据。此设置对于在互联网上建立安全通信通道至关重要,确保交换的数据保持机密并受到未授权访问的保护。
**默认端口**1723
## 枚举
```bash
nmap Pn -sSV -p1723 <IP>
```
### [暴力破解](../generic-hacking/brute-force.md#pptp)
## 漏洞
- [https://www.schneier.com/academic/pptp/](https://www.schneier.com/academic/pptp/)
- [https://github.com/moxie0/chapcrack](https://github.com/moxie0/chapcrack)
{{#include ../banners/hacktricks-training.md}}