Get a Pentest and security assessment of your IT network.

News

Don’t count on Kerberos to thwart pass-the-hash attacks

Kerberos is an open authentication protocol used on a variety of computer systems. The password hashes are neither sent nor stored, so they can’t be captured and reused as easily as easily. In Windows, password hash is not sent or stored on the remote server or hosting process in Windows over network connections. The idea that the attacker will gain elevated access to a server computer and capture the passwords of every user connected over the network isn’t realistic. In most networks, the older authentication protocols run all the time.”]

Source: https://www.csoonline.com/article/2626810/don-t-count-on-kerberos-to-thwart-pass-the-hash-attacks.html

Related posts
News

Ashley Madison 2.0 Hackers Leak 20GB Data Dump, Including CEO's Emails

News

Art of Twitter account hacking

News

SEA has stolen invoices that shows Microsoft charges FBI for user data

News

Greek police arrested a man running the BTC-e Bitcoin exchange to launder more than US$4bn worth of the Bitcoin