One Day Sec

What is the significance of obtaining PPTP passwords in penetration testing?

Acquiring a user's PPTP password allows an attacker to remotely dial into the corporate intranet, enabling further infiltration and lateral movement. This technique is a key step in network penetration, as described in Penetration Techniques - Acquisition and Brute-Force of PPTP Passwords. Once inside, attackers can combine this with other methods like Domain Penetration - Remote Execution via Scheduled Tasks in GPO to execute commands remotely.
PPTPpenetration testingintranet accesslateral movementVPN

Browse all Q&A →