• info
• discussion
• exploit
• solution
• references

Cisco LEAP Password Disclosure Weakness

There are a number of publicly available tools to exploit this issue. The following proof-of-concepts were also released:

• /data/vulnerabilities/exploits/bfnthash.c
• /data/vulnerabilities/exploits/chaptest.c
• /data/vulnerabilities/exploits/clean.sh
• /data/vulnerabilities/exploits/compile.sh
• /data/vulnerabilities/exploits/des.h
• /data/vulnerabilities/exploits/deskey.c
• /data/vulnerabilities/exploits/desport.c
• /data/vulnerabilities/exploits/md4.c
• /data/vulnerabilities/exploits/md4.h
• /data/vulnerabilities/exploits/mschap.c
• /data/vulnerabilities/exploits/mschap.h
• /data/vulnerabilities/exploits/Notes