3 ms·
> I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows Even if it didn't, which I'm not sure about, they still
by microcolonel 7y ago
> I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows
Even if it didn't, which I'm not sure about, they still need to send one if you're trying to open a samba share. This attack works by presenting a UNC link to a samba share, which (when the user accepts the credential prompt) will send a nice compatible NTLM password hash.