Collaborate Disseminate
I am running Hyper-V for years. Recently I tried to harden my environment by applying GPOs that disable NTLM, as NTLM is discouraged by Microsoft. Now Hyper-V VMConnect stopped working and I keep getting “An authentication error has occurr… Continue reading Hyper-V-VMConnect with Kerberos rather than NTLM?
I’m trying to understand the way Windows computers store passwords through an exercise which is as follows :
Set up a fully-patched Windows 10 Pro (64-bit) virtual machine in VMware Workstation Pro (done)
Create 3 common users with very … Continue reading Why can’t I crack NTLM hashes using Ophcrack?
I understand that Kerberos is the recent authentication protocol used in windows environment and that NTLM is still supported for interoperability only.
I want to know in non domain environments,if i am logging to my own pc at home which h… Continue reading NTLM Modern usage
I am writing here since I have a huge doubt. I am performing a technical security assessment on a custom developed web application (ASP.NET).
The application:
is Internet-facing
Uses HTTPS
Uses IIS with NTLM authentication with NTLMSSP … Continue reading Is NTLM (over HTTPS) on IIS a good idea for a Internet-facing website
Malware campaign targets global manufacturers that are still dependent on Windows 7 subsystems to run fleets of IoT endpoints. Continue reading New Lemon Duck Malware Campaign Targets IoT, Large Manufacturers
Recently, we migrated from Windows 7 to Windows 10 and during that migration, we progressively ran into some issues with our NAS device. To be more precise, we progressively noticed some tcp socket flooding on it while client… Continue reading Does Kerberos authentication handle DNS names the same way between Windows 7 and Windows 10?
best tool to multi-threaded wordlist attack on active directory users?
i have a list with users and also a badpassword list.
parameter should be: app -u users.txt -p pasws.txt
it should test every user with every pass.
I’ve recently implemented a SIEM solution, and am now able to see a large amount of failed login attempts from legitimate users. In fact, it’s such high volume that my SIEM is correlating them to be Brute Force attacks. Howev… Continue reading Tracking Down Failed Logins
i tried to test if an enviroment is vulnerable to ntlm relaying attacks.
so i run responder
responder -I eth0 -r -d -w
and impackets ntlmrelayx
python ntlmrelayx.py -t <targetip> -smb2support
if i use smb2support… Continue reading impacket’s ntlmrelayx.py throws error on -smb2support flag
I’m doing a search on how windows 10 saves hashed passwords in the SAM file. From this article I suppose that Windows does this:
If the password is 123456 and the user has RID 000003E9:
~~ CALCULATION OF NTLM ~~
-MD4 (123456… Continue reading How does windows 10 v.1803 save the password in the SAM file?