Discover and read the best of Twitter Threads about #netrdfsremovestdroot
Most recents (1)
Nice new #coercion method from @filip_dragovic
using Microsoft's Distributed File System (MS-DFSNM) protocol on \PIPE\netdfs.
PoC: github.com/Wh04m1001/DFSC…
It works nicely👌
using Microsoft's Distributed File System (MS-DFSNM) protocol on \PIPE\netdfs.
PoC: github.com/Wh04m1001/DFSC…
It works nicely👌
@filip_dragovic [#thread 🧵] Here is a complete explanation of what you see here:
On the left I have my attacking machine and on the right I have a Windows Server that I use as a Domain Controller.
On the left I have my attacking machine and on the right I have a Windows Server that I use as a Domain Controller.
[#thread 🧵] In the top left terminal of my attacking machine is the program to exploit this new vulnerability.
In the bottom left is Responder, a tool allowing to mimic the authentication step of many windows protocols in order to show the hashes (NTLMv1, NTLMv2, etc ...)
In the bottom left is Responder, a tool allowing to mimic the authentication step of many windows protocols in order to show the hashes (NTLMv1, NTLMv2, etc ...)
