
azbelt
AAD related enumeration in Nim
authenticationcloud-securityidentity-access-management+5
1322 years ago

AAD related enumeration in Nim

DLL that hooks NTLM and Kerberos authentication in lsass.exe to inject a backdoor hash, enabling persistent authenticated access on Windows systems.