ITSEC Newsletter 2024-09-19

Author

Henrik Falk
September 19, 2024

Welcome To bug.directory

bug.directory is a searchable Obsidian vault brought to you by the exploits.club team. It’s intended to serve as a collection of vuln research, exploit development, and reverse engineering resources to help you get spun up on new projects fast. The database has been initially seeded with weekly resources collected for the exploits club newsletter. That said, the vault is open-source and thus the more contributions from the community the better.

bug.directory

Three-Headed Potato Dog

Earlier this year, several security researchers published research about using DCOM to coerce Windows systems to authenticate to other systems. This can be misused to relay the authentication to NTLM or Kerberos, to AD CS over HTTP for instance. This sounds like a hot and complex topic. Let’s take a look back how this started and how it works.

blog.compass-security.com/2024/09/three-headed-potato-dog

NTLM Relaying - Making the Old New Again

There will be nothing new here, only the old revisited, but just maybe some of these techniques have slipped your mind or in the rush to abuse ESC1 you might not have tried them.

labs.jumpsec.com/ntlm-relaying-making-the-old-new-again