Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

thc-pptp-bruter

THC PPTP Brute Force

brute-forceRed Team
Official docs ↗Download ↗Source repo ↗

Platforms: Linux · Last verified September 6, 2026

Brute force program against pptp vpn endpoints (tcp port 1723). Fully standalone. Supports latest MSChapV2 authentication. Tested against Windows and Cisco gateways. Exploits a weakness in Microsoft’s anti-brute force implementation which makes it possible to try 300 passwords the second.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Install on Kali Linux with `sudo apt install thc-pptp-bruter`. See the official Kali tool page and upstream homepage linked above for full usage and configuration details.

Commonly preinstalled on

Kali Linux

Debian-based distribution built for penetration testing and security auditing