Curated security research, vulnerabilities, advisories and tools for practitioners.

Relay Your Heart Away: An OPSEC-Conscious Approach to 445 Takeover

Summary

Even within organizations that have achieved a mature security posture, targeted NTLM relay attacks are still incredibly effective after all these years of abuse. Leveraging several of these NTLM relay primitives, specifically ones that require coercing SMB-based authentication, come with additional challenges to overcome while operating over command and control (C2). This technique will the […]
Published
Collected