{
  "port": 1723,
  "protocol": "tcp",
  "service": "PPTP",
  "oneLiner": "A PPTP VPN server — obsolete, cryptographically broken, and still everywhere on old routers.",
  "whatItIs": "PPTP splits itself in two: a TCP 1723 control connection that negotiates and tears down tunnels, and GRE (IP protocol 47) carrying the encapsulated PPP frames. RFC 2637 documents it, and Microsoft shipped it in every Windows since NT 4, which is why it lives on in consumer routers, older RRAS servers, and appliance firmware. Its security rests on MS-CHAP v2 and MPPE, and Microsoft itself issued Security Advisory 2743314 telling customers to stop using unencapsulated MS-CHAP v2 after the 2012 demonstrations that reduced it to a single DES key search. Microsoft has since deprecated PPTP in Windows Server RRAS.",
  "exposure": {
    "verdict": "never",
    "note": "A captured PPTP handshake yields the user's password hash to an offline attack that finishes in hours, so an internet-facing 1723 is a credential leak waiting to be collected — replace it with WireGuard, IKEv2, or OpenVPN."
  },
  "checkCommand": "nmap -p 1723 --script pptp-version TARGET",
  "links": [
    {
      "title": "RFC 2637 — Point-to-Point Tunneling Protocol (PPTP)",
      "url": "https://www.rfc-editor.org/rfc/rfc2637.html",
      "kind": "spec"
    },
    {
      "title": "Microsoft Security Advisory 2743314 — Unencapsulated MS-CHAP v2 authentication could allow information disclosure",
      "url": "https://learn.microsoft.com/en-us/security-updates/securityadvisories/2012/2743314",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 1723",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1723",
      "kind": "iana"
    }
  ]
}