ADV170014 NTLM SSO: Exploitation Guide

[SirGod]

The vulnerability

 

It is a known issue that Microsoft NTLM architecture has some failures, hash stealing is not something new, it is one of the first things a pentester tries when attacking a Microsoft environment.

But, most of these techniques require user intervention or traffic interception to fulfill the attack.

These new attacks require no user interaction, everything is done from the attacker’s side, but of course, there are some conditions that need to be met to be successful with this attack.

 

Link articol: http://www.sysadminjd.com/adv170014-ntlm-sso-exploitation-guide/

[Nytro]

Uhuuu, simplu si frumos, merita incercat.  

[black_death_c4t]

23 hours ago, Nytro said:

Uhuuu, simplu si frumos, merita incercat.  

Diva

[Nytro]

Dovlecel, traiesti?

 

PS: Nu am gasit un share OK pe care sa testez...