Anthony Bahn·9h agoHow to Block Outbound SMB to Stop NTLM Hash LeaksTo block outbound SMB, deny TCP 445 from your internal networks to the internet at the perimeter firewall, then add a matching host…
Borz Fabian-Denis·Sep 15HTB Noxious writeup: Solving LLMNR poisoning attack using Splunk.In this Sherlock scenario we are in the role of an Network Forensics Expert. There are signs in the AD network of LLMNR traffic directed…
Shakshisona·Aug 6The Hash is the Password: How NTLM Turns Memory Dumps into Master KeysImagine a security guard who verifies your identity not by asking for your actual password, but by checking whether you hold a token…
Jackson·Jun 6Windows Authentication Internals: NTLM, Kerberos, Pass-the-Hash, and Pass-the-TicketLearn the fundamentals of NTLM and Kerberos
Yunus Emre Pak·May 19The Secure One Is Silent: Kerberos Stays Quiet, NTLM TellsThe Importance of NTLM Packets in Analysis Processes
EternalSec·Apr 3SMB Signing Not Required: The Silent Door Your Network Left OpenThat one misconfiguration that lets attackers silently own your entire Windows domain — and most defenders never notice it.A response icon1A response icon1
sender·Apr 2ghostsurf: From NTLM Relay to Browser Session HijackingTL;DR: ntlmrelayx's SOCKS proxy works great for SMB and MSSQL but fails when you try to browse a web application through it - I dug into…
Fidan Gasimzada·Feb 1SOC mühitində Kerberos: Normal autentifikasiya və real hücumlarKerberos — Active Directory mühitlərində istifadəçilərin və servislərin kimliyini yoxlamaq üçün istifadə olunan əsas autentifikasiya…
Peter Ochieng·Jan 9Using NTLM Soap Authentication with PHPIn the use of Microsoft services such as Business Central, there is a need to configure portals to work with the ERP. One of the languages…
