Anthony Bahn·8h agoHow to Block Outbound SMB to Stop NTLM Hash LeaksTo block outbound SMB, deny TCP 445 from your internal networks to the internet at the perimeter firewall, then add a matching host…
Borz Fabian-Denis·Sep 15HTB Noxious writeup: Solving LLMNR poisoning attack using Splunk.In this Sherlock scenario we are in the role of an Network Forensics Expert. There are signs in the AD network of LLMNR traffic directed…
Shakshisona·Aug 6The Hash is the Password: How NTLM Turns Memory Dumps into Master KeysImagine a security guard who verifies your identity not by asking for your actual password, but by checking whether you hold a token…
Jackson·Jun 6Windows Authentication Internals: NTLM, Kerberos, Pass-the-Hash, and Pass-the-TicketLearn the fundamentals of NTLM and Kerberos
