3 ms·
Sure, NTLM relaying is standard pentest/attacker tooling and just this month Microsoft addressed two issues where NTLM vulnerabilities can lead to full domain c
by noinsight 9y ago
Sure, NTLM relaying is standard pentest/attacker tooling and just this month Microsoft addressed two issues where NTLM vulnerabilities can lead to full domain compromise (in the worst case).
See: https://blog.preempt.com/new-ldap-rdp-relay-vulnerabilities-in-ntlm https://blog.preempt.com/new-ldap-rdp-relay-vulnerabilities-...