News for hackers. Stuff that matters.

A comment on Zoom Windows client could allow credentials to be leaked via UNC path injection.

Re:Zoom Windows client could allow credentials to be leaked ... by sk5t on Wednesday April 01, 2020 @10:06AM (#22748561)
Misleading title, Zoom doesn't divulge the password hash, but also doesn't prevent users from clicking on UNCs.

Having fallen out of paying attention to Windows Server over the past few years, I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows (although that's not to say most of the Windows install base isn't in obsolescence).

[ Parent | on HN ]
Re:Zoom Windows client could allow credentials to be leaked ... by microcolonel on Wednesday April 01, 2020 @10:27AM (#22748853)
> I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows

Even if it didn't, which I'm not sure about, they still need to send one if you're trying to open a samba share. This attack works by presenting a UNC link to a samba share, which (when the user accepts the credential prompt) will send a nice compatible NTLM password hash.

[ Parent | on HN ]