News for hackers. Stuff that matters.

A comment on Zoom Windows client could allow credentials to be leaked via UNC path injection.

Re:Zoom Windows client could allow credentials to be leaked ... by lazerl0rd on Thursday April 02, 2020 @05:32PM (#22764101)
TBF, you can disable NTLM leaking with the registry change below:

  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v "RestrictReceivingNTLMTraffic" /t REG_DWORD /d 2 /f
  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v "RestrictSendingNTLMTraffic" /t REG_DWORD /d 2 /f
It's an option of my personal "de-tracking" Windows 10 script https://github.com/lazerl0rd/ScriptWINg.
[ Parent | on HN ]

There are no comments on this comment yet.