Posts tagged "ntlm"
2 posts
ESC17 - Beyond WSUS: Intercepting Internal HTTPS
ESC17 forges a domain-trusted certificate. Against internal HTTPS, it surfaces credentials, session tokens, and Windows authentications in the clear.
July 26, 2026 · 25 min read
ESC17 - Beyond WSUS: Hijacking Kerberos Sessions over LDAPS
ESC17 breaks LDAPS TLS, but authentication lives above it: cleartext bind capture and session hijacking, against NTLM as well as Kerberos, on the DC.
July 26, 2026 · 28 min read