Re:Zoom Windows client could allow credentials to be leaked ...
by microcolonel on Wednesday April 01, 2020 @10:27AM
(#22748853)
> I'd be a little surprised if the weak NTLM hash is still on by default in current versions of Windows
Even if it didn't, which I'm not sure about, they still need to send one if you're trying to open a samba share. This attack works by presenting a UNC link to a samba share, which (when the user accepts the credential prompt) will send a nice compatible NTLM password hash.
Even if it didn't, which I'm not sure about, they still need to send one if you're trying to open a samba share. This attack works by presenting a UNC link to a samba share, which (when the user accepts the credential prompt) will send a nice compatible NTLM password hash.