Curated security research, vulnerabilities, advisories and tools for practitioners.

#ntlm

Security coverage tagged ntlm.

1.

Signed, Sealed, and Relayed, NTLM-style: Bypassing LDAP Signing Through Reauthentication

blog | 2026-10-23 16:08 | specterops.io | Original ↗ | .md | #active-directory | #ntlm | #ldap-signing

2.

The Gold Mine Red Teamers Never Touch

blog | 2026-05-22 00:00 | abdulmhsblog.com | Original ↗ | .md | #kerberos | #windows-security | #ntlm

3.

CVE-2026-24294: Windows SMB local NTLM reflection privilege-escalation PoC

vulnerability | High | 2026-04-30 04:31 | CVE-2026-24294 | github.com | Original ↗ | .md | #public-poc | #featured | #privilege-escalation

4.

When Is WinRM Over HTTP Secure?

blog | 2026-03-17 22:57 | semperis.com | Original ↗ | .md | #active-directory | #kerberos | #windows-security

5.

What You’re Missing: Proper LAN Manager Authentication Levels

blog | 2026-03-11 22:40 | semperis.com | Original ↗ | .md | #remediation | #active-directory | #privilege-escalation

6.

CVE-2025-26685 – Spoofing to Elevate Privileges with Microsoft Defender for Identity

vulnerability | 2025-06-12 00:00 | CVE-2025-26685 | netspi.com | Original ↗ | .md | #active-directory | #privilege-escalation | #ntlm

7.

How to Defend Against an Overpass the Hash Attack

blog | 2024-02-09 01:38 | semperis.com | Original ↗ | .md | #active-directory | #credential-theft | #kerberos

8.

Pass the Hash Attack Defense: AD Security 101

vulnerability | 2024-01-18 19:58 | semperis.com | Original ↗ | .md | #active-directory | #credential-theft | #ntlm

9.

Password Strength Checkers - Mostly Useless...

research | 2023-10-20 07:31 | projectblack.io | Original ↗ | .md | #ntlm | #gpu-cracking | #password-security

10.

Active Directory Security Best Practices

blog | 2023-10-13 23:51 | semperis.com | Original ↗ | .md | #active-directory | #ntlm | #best-practices

11.

Remote Hash Extraction On Demand Via Host Security Descriptor Modification

blog | 2018-04-10 07:00 | specterops.io | Original ↗ | .md | #ntlm | #specterops | #hash-extraction

12.

NetSPI’s Top Password Masks for 2015

blog | 2016-01-19 00:00 | netspi.com | Original ↗ | .md | #pentesting | #ntlm | #password-cracking

13.

NetSPI's Top Cracked Passwords for 2014

blog | 2015-03-02 00:00 | netspi.com | Original ↗ | .md | #windows | #ntlm | #password-cracking

14.

Cracking Stats for Q3 2014

blog | 2014-12-15 00:00 | netspi.com | Original ↗ | .md | #windows | #ntlm | #password-cracking

15.

LM Hash Cracking – Rainbow Tables vs GPU Brute Force

blog | 2014-10-06 00:00 | netspi.com | Original ↗ | .md | #windows | #ntlm | #gpu-cracking

16.

Cracking Stats for Q2 2014

blog | 2014-08-18 00:00 | netspi.com | Original ↗ | .md | #windows | #ntlm | #password-cracking

17.

Cracking Stats for Q1 2014

blog | 2014-06-02 00:00 | netspi.com | Original ↗ | .md | #windows | #ntlm | #password-cracking

18.

GPU Cracking: Putting It All Together

blog | 2013-06-04 00:00 | netspi.com | Original ↗ | .md | #ntlm | #gpu-cracking | #password-cracking

19.

GPU Cracking: Building the Box

blog | 2013-04-07 00:00 | netspi.com | Original ↗ | .md | #ntlm | #penetration-testing | #hardware

20.

Executing SMB Relay Attacks via SQL Server using Metasploit

blog | 2012-12-26 00:00 | netspi.com | Original ↗ | .md | #ntlm | #metasploit | #pentest

21.

research | 2012-05-13 22:00 | blog.quarkslab.com | Original ↗ | .md | #windows | #ntlm | #tooling