NTLM Courses and Certifications

Cooper

Nightmare On NTLM Street - Legacy's Revenge

Explore NTLM authentication vulnerabilities and legacy system security challenges in this cybersecurity analysis by Marina Bochenkova.

• YouTube
• 36 minutes
• On-Demand
• Free Video

BSidesMunich

NTLM Reflection Is Dead, Long Live... - Story Of An Accidental Windows RCE

Discover how researchers accidentally found a Windows RCE vulnerability while investigating NTLM reflection attacks and their modern security implications.

• YouTube
• 29 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Explotando NTLM como si fueran los 2000

Descubre técnicas de explotación del protocolo NTLM y ataques de relay que siguen siendo relevantes desde los años 2000 hasta la actualidad en entornos de red.

• YouTube
• 36 minutes
• On-Demand
• Free Video

DEFCONConference

NTLM Authentication Vulnerabilities and Exploits - A Final Analysis

Dive into critical NTLM authentication vulnerabilities, exploring new bugs, bypass techniques, and security control gaps in Windows systems before Microsoft phases out this protocol.

• YouTube
• 33 minutes
• On-Demand
• Free Video

SNIAVideo

Eliminating NTLM in Storage

Discover how to eliminate NTLM security risks in storage environments through IAKerb/Local KDC, auditing, and auto-redirect features for secure SMB authentication.

• YouTube
• 48 minutes
• On-Demand
• Free Video

HackerSploit

Windows Post Exploitation - Dumping & Cracking NTLM Hashes

Demonstra o processo de extração e quebra de hashes NTLM no Windows, além de cobrir o uso de hashes NTLM para ataques Pass-The-Hash em cenários de pós-exploração.

• YouTube
• 28 minutes
• On-Demand
• Free Video

Cyber Mentor

NTLM Relay, Token Impersonation, Pass the Hash, PsExec, and More

Explore advanced Active Directory exploitation techniques including NTLM relay, token impersonation, and pass-the-hash attacks. Learn practical skills for penetration testing and network security.

• YouTube
• 2 hours 8 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

NTLM Relay Is Dead, Long Live NTLM Relay

Explore NTLM relay attacks, their evolution, and modern exploitation techniques. Learn about vulnerabilities in Windows protocols and browsers, with insights on defense strategies.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

x33fcon

NTLM Relay Attacks - An OPSEC-Conscious Approach to Port 445 Takeover

Discover a stealthy technique for NTLM relay attacks by hijacking port 445/tcp, featuring reverse engineering insights and automation tools for enhanced SMB-based operations with minimal detection risk.

• YouTube
• 46 minutes
• On-Demand
• Free Video

Hack In The Box Security Conference

How NTLM Relay Ruins Your Exchange Servers

Uncovers a critical NTLM relay attack surface in Exchange Server, affecting mailbox security and potentially leading to RCE. Explores vulnerabilities, exploits, patches, and protection strategies for Exchange environments.

• YouTube
• 52 minutes
• On-Demand
• Free Video

Ekoparty Security Conference

Understanding the Win SMB NTLM Weak Nonce Vulnerability

Explore the Win SMB NTLM weak nonce vulnerability, its implications, and potential exploits in this technical deep dive from security experts Ochoa and Azubel.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Black Hat

Server Tailgating - A Chosen-Plaintext Attack on RDP

Uncover a chosen-plaintext attack on Windows authentication, exploiting a vulnerability in common protocols. Learn about the attack's mechanics, implications for network security, and mitigation strategies.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Cyber Mentor

Hack Active Directory with LLMNR

Learn to exploit LLMNR vulnerabilities in Active Directory environments, gaining unauthorized access and escalating privileges through hands-on hacking techniques.

• YouTube
• 26 minutes
• On-Demand
• Free Video

Network Hashes: A Review of Many Network Protocols - Robert Graham

Comprehensive review of network protocols, covering authentication, encryption, and security aspects across various services like SMTP, HTTP, and VPN.

• YouTube
• 49 minutes
• On-Demand
• Free Video

Black Hat

Pass the Hash and Other Credential Theft - Reuse - Mitigating Risk

Explore Pass the Hash attacks and Microsoft's recommended mitigations, including credential theft prevention, authentication policies, and platform changes for enhanced cybersecurity.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk