NetNTLMv1 Downgrade Attack - Quick Domain Compromise

Описание

For educational purpose only: The attacker configures Responder to use a static challenge and then coerces an authentication from the target system. The captured NTLM hash is cracked to obtain the computer account hash, which can be used to create a Silver Ticket for gaining administrative access. If the target is a domain controller, the attacker can perform a DCSync attack without impersonating any other account. Tools like Petit Potam, DFSCoerce, and Coercer or similiar can be used to trigger authentication.