How NTLM Relay Ruins Your Exchange Servers
Hack In The Box Security Conference via YouTube
MIT Sloan: Lead AI Adoption Across Your Organization — Not Just Pilot It
Learn Python with Generative AI - Self Paced Online
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore the critical intersection of NTLM Relay attacks and Exchange Server vulnerabilities in this illuminating conference talk. Delve into a rarely discussed attack surface affecting Exchange cluster environments, impacting approximately 60% of frontend and 70% of backend endpoints. Learn how these architectural design issues can be exploited to compromise user mailboxes, granting attackers the ability to read and send emails, download attachments, and potentially achieve remote code execution on Exchange Servers. Follow along as the speaker uncovers the root causes of these vulnerabilities, demonstrates exploitation techniques, discusses patches and their bypasses, and provides essential guidance on protecting Exchange Servers from these threats. Gain valuable insights from a senior security researcher's expertise in Windows Active Directory Security, Cloud Security, and Web Security.
Syllabus
#HITB2023HKT D1T2 - How NTLM Relay Ruins Your Exchange Servers - Tianze Ding
Taught by
Hack In The Box Security Conference