
RemoteMonologue
Weaponizing DCOM for NTLM Authentication Coercions
adversarial-attackauthenticationexploitation+6
21511 months ago

Weaponizing DCOM for NTLM Authentication Coercions

Kali365 - EvilTokens Replica

Similar to Petitpotam, the netdfs service is enabled in Windows Server and AD environments, and the abused RPC method allows privileged processes to…

Modern cyber range with 50 hands-on challenges across web, API, cloud, AI, and blue-team security tracks. Features guided attack chains, transparent…