SMBv2 - Sharing More Than Just Your Files

Explore a critical security vulnerability in SMBv2 affecting all versions of Internet Explorer, including Windows 10's Spartan browser. Delve into a new attack vector that enables complete user compromise from the internet, transcending traditional LAN-based SMB attacks. Discover how remote credentials theft and user impersonation can be executed without user interaction, with high reliability, by exploiting a series of bugs and malfunctions. Learn about this 43-minute Black Hat conference talk presented by Jonathan Brossard and Hormazd Billimoria, which unveils the potential risks of sharing more than just files through SMBv2.