CVE-2024-4573-Mitigation-Script

CVE-2024-4573-Mitigation-Script CVE-2024-43451 es una vulnerabilidad en sistemas que permiten la autenticación NTLM, un protocolo heredado que puede ser explotado para ataques de reenvío de credenciales o ataques de fuerza bruta. Esta vulnerabilidad surge cuando NTLM está habilitado, dejando a lo...

Windows NetLM Downgrade Attack

This module changes the system LmCompatibilityLevel registry value to enable sending LM challenge hashes and initiates a SMB connection to the host specified in the SMBHOST module option. If an SMB server is listening, it will receive the NetLM hashes for the session user. This module requires...

MS Exchange Server 5.5: POP3 & IMAP Authentication Problem -> BUG

Hi, I found a little issue with a possible misconfiguration with Exchange Server 5.5 and Windows NT Server 4.0 . If the value LMCompatibilityLevel is added to the registry and set to 5 on a NT server that is running Exchange Server 5.5 running POP3 or IMAP4, a client will no longer be able to...