NTLM Relay Is Dead, Long Live NTLM Relay

NTLM Relay Is Dead, Long Live NTLM Relay

Explore the intricacies of NTLM Relay attacks in this 48-minute conference talk from the Hack In The Box Security Conference. Delve into the fundamentals of NTLM, including its message structure and protocols. Examine various attack techniques such as SMB Reflect Attack and Hot Potato. Investigate how NTLM Relay affects modern browsers, focusing on NTLMSSP over HTTP and Intranet Zone settings. Analyze the implementation differences between Windows 7 and Windows 10, and discover new attack surfaces in Chrome. Learn about the resurgence of SMB Reflection Attacks and understand Java's role in NTLM authentication. Gain insights into real-world cases and effective defense strategies against NTLM Relay attacks.