Pass the Hash on Windows 8.1(samsclass.info)

5 pointsby lelfhace 12 años3 comments

http://samsclass.info/lulz/pth-8.1.htm

4 comments

Whilst this interesting, I feel the need to channel Raymond Chen (of http://blogs.msdn.com/b/oldnewthing/)and say "if you disable security features, you have disabled security features, don't be surprised when it is now less secure".

In this case there still is an issue that should really be addressed, but that will be why it probably isn't ranked high on the to-address list

Fake4dhace 12 años

https://twitter.com/markrussinovich/status/43768318205430579...

Here is a Tweet from Mark Russinovich to this topic! I asked him bout that!

vezzy-fnordhace 12 años

The thread on /r/netsec offers some clarification: http://www.reddit.com/r/netsec/comments/1ypdo1/sorry_microso...

Ostensibly, the vulnerability is necessary to maintain functionality. Something to do with the particular Kerberos implementation and backwards compatibility. They've made it more difficult to get to the point where you can attack, however.

TempleOSV2hace 12 años