IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [ntlm]

NT LAN Manager (NTLM) is a series of protocols developed by Microsoft.

52 questions
0
votes
0 answers

Hyper-V-VMConnect with Kerberos rather than NTLM?

I am running Hyper-V for years. Recently I tried to harden my environment by applying GPOs that disable NTLM, as NTLM is discouraged by Microsoft. Now Hyper-V VMConnect stopped working and I keep getting “An authentication error has occurred. The…
Joachim
  • 1
  • 1
0
votes
1 answer

Does Kerberos authentication handle DNS names the same way between Windows 7 and Windows 10?

Recently, we migrated from Windows 7 to Windows 10 and during that migration, we progressively ran into some issues with our NAS device. To be more precise, we progressively noticed some tcp socket flooding on it while client computers were upgraded…
pmbonneau
  • 161
  • 2
  • 2
  • 10
0
votes
1 answer

How to intercept ntlm authentication based application?

There is an internal application which authenticates based on windows credentials (NTLM Authentication). It is not intercepting while in proxy with Burp Suite and is stuck in login pop-up even after providing correct credentials. Upon removing the…
Mridul Sengupta
  • 1
  • 1
  • 1
0
votes
1 answer

Does Windows Authentication Use Secured Connection

I am writing a .NET Web API that will be used in an enterprise environment where users authentication themselves using their active directory credentials, so I am using "Windows Authentication" in IIS as authentication scheme for my API, but I am…
Sisyphus
  • 133
  • 3
0
votes
1 answer

John the Ripper Character Lists

How is it possible to use or prioritize umlauted characters - ä ö ü ß Ä Ö Ü - whilst brute forcing. I'm not using any wordlist, only dozens of CPU threads via the following command : ./john --fork=64 --format=NT hash.txt Using john-1.8.0-jumbo-1.
Parsa Samet
  • 246
  • 2
  • 10
0
votes
1 answer

NTML2 Session Response and Browsers

I've been looking at the NTML2 Session Response which is apparently supported transparently by commonly used browsers. NOTE: This is not to be confused with full NTLMv2 authentication. This in-depth and detailed explanation describes the core…
JimmyJames
  • 2,956
  • 2
  • 16
  • 25
0
votes
1 answer

Client app auto-updating passwords, no SSO

My customer has an ActiveDirectory server and a work server, both without SSO. Employees use their ActiveDirectory account to connect to the work server. They change passwords every month. My app connects to the work server. My app can use SSO, or…
Nicolas Raoul
  • 1,276
  • 2
  • 12
  • 17
1 2 3
4