Login

Recent searches

No recent searches

Search options

Not available on mastodon.xyz.
mastodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance, open to everyone, but mainly English and French speaking.

Administered by:

Server stats:

789
active users

mastodon.xyz: AboutProfiles directoryPrivacy policy

Mastodon: AboutGet the appKeyboard shortcutsView source codev4.3.4

#ntlm

1 post1 participant0 posts today
Public
MalwareLab

One example why to use strong #passwords for users who use file sharing over #SMB even when the file transfers are #encrypted.
If the SMB traffic is captured/eavesdropped, then the attacker can try to crack the user password.
The attacker is able to extract challenge/response values from the Session Setup and then use #passwordcracking tools such as #hashcat

If the attack is successful, the attacker will gain not only the access to the user account, but it is also possible to decrypt the captured SMB file transfers. There is lack of perfect forward secrecy in this encryption.

For more details and practical examples, see this blog post:

malwarelab.eu/posts/tryhackme-

extraction of challenge/response parameters from the pcap with tshark
cracking password with hashcat, example of dictionary attack against NetNTLMv2
NT Password in Wireshark NTLMSSP protocol preferences
Decrypted SMB traffic
#networktrafficanalysis#networktraffic#encryption
Public
r1cksec

New cheatsheets pushed🕵️‍♂️

github.com/r1cksec/cheatsheets

Including:

A nice blogpost about different ntlm relay attack scenarios🖥️

guidepointsecurity.com/blog/be

Using the Windows Security Center service, it is possible to deactivate Windows Defender by telling the service that a different antivirus program is being used :windows:

github.com/es3n1n/no-defender

A quite interesting phishing technique in which the legitimate platform Yousign is used as a communication and hosting channel🎣

agari.com/blog/active-phishing

#infosec#cybersecurity#threatintel
Public
Redhotcyber

VBScript Addio! Microsoft Annuncia la Graduale Eliminazione Entro il 2027

E’ ora di pulizie in casa #Microsoft! Dopo #NTLM ora anche #VBScript si vuole eliminare dall’architettura di #Windows.

#redhotcyber #online #it #ai #hacking #innovation #privacy #cybersecurity #technology #engineering #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

redhotcyber.com/post/vbscript-

il blog della sicurezza informatica · VBScript Addio! Microsoft Annuncia la Graduale Eliminazione Entro il 2027Microsoft eliminerà gradualmente VBScript da Windows entro il 2027 in tre fasi, promuovendo linguaggi più moderni come JavaScript e PowerShell. Scopri i dettagli.
Public
Redhotcyber

Addio ad NTLM! Microsoft eliminino a metà 2024 un pezzo di storia che ha fatto molto discutere

Questa settimana #Microsoft ha confermato i suoi piani per eliminare gradualmente #NT #LAN #Manager (#NTLM). L’azienda ha inoltre annunciato una serie di nuove misure protettive volte a #rafforzare la #sicurezza del #sistema operativo.

#redhotcyber #online #it #ai #hacking #innovation #privacy #cybersecurity #technology #engineering #cybercrime #intelligence #intelligenzaartificiale #informationsecurity #ethicalhacking #dataprotection #cybersecurityawareness #cybersecuritytraining #cybersecuritynews #infosecurity

redhotcyber.com/post/addio-ad-

il blog della sicurezza informatica · Addio ad NTLM! Microsoft eliminino a metà 2024 un pezzo di storia che ha fatto molto discutereTra poco Microsoft si appresta a dare l'addio alla tecnologia di lunga dat NTLM. Si tratta di una tecnologia discussa dagli esperti di sicurezza.
ExploreLive feeds
About