Windows authentication attacks – part 1

PetitPotam – NTLM Relay to AD CS

Cyber Chunk on Instagram: "🔐 How does Windows verify your login without sending your password? It uses NTLM authentication — here’s the flow in simple terms: 1️⃣ User requests access (shared folder / resource) 2️⃣ Server sends a random challenge 3️⃣ Client encrypts it using password hash 4️⃣ Server verifies the response ✅ Match = Access granted ❌ No match = Access denied ⚠️ Sounds smart… but NTLM is now considered legacy & risky. 📌 Remember: NTLM never sends your password — it sends a proof of

Microsoft phases out NTLM, a weak authentication protocol exploited by hackers

What is Windows LAPS?

Overview of Service Principal Name and Kerberos authentication in SQL Server