HackTheBox Reaper Writeup | NTLM Relay Attack Detection
Tags
attack-pattern: Data Authentication Attempt - T1381 Credentials - T1589.001 Dns - T1071.004 Dns - T1590.002 Ip Addresses - T1590.005 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Tool - T1588.002 Brute Force - T1110 Scheduled Task - T1053
Show in Graph
Common Information
Type Value
UUID 10f4fb36-77e5-4447-b01f-dd0683fe586d
Fingerprint 14b0c49910b224c7
Analysis status DONE
Considered CTI value -2
Text language
Published Dec. 23, 2024, 9:43 a.m.
Added to db Dec. 23, 2024, 11:09 a.m.
Last updated Dec. 23, 2024, 11:17 a.m.
Headline HackTheBox Reaper Writeup | NTLM Relay Attack Detection
Title HackTheBox Reaper Writeup | NTLM Relay Attack Detection
Detected Hints/Tags/Attributes 33/1/11
Source URLs
Redirection Url
Details Source https://motasemhamdan.medium.com/hackthebox-reaper-writeup-ntlm-relay-attack-detection-d8a8f6eeeaab?source=rss------infosec-5
Details Source https://motasemhamdan.medium.com/hackthebox-reaper-writeup-ntlm-relay-attack-detection-d8a8f6eeeaab?source=rss------cybersecurity-5
URL Provider
Details Provider Source level domain
Details medium.com motasemhamdan.medium.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 167 ✔ Cybersecurity on Medium https://medium.com/feed/tag/cybersecurity 2024-08-30 22:08
Details 168 ✔ Infosec on Medium https://medium.com/feed/tag/infosec 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details Domain 1 
system.computer
Details File 3 
security.json
Details File 3 
event.sys
Details File 2 
eventdata.tar
Details IPv4 1 
172.17.79.0
Details IPv4 1 
172.17.79.4
Details IPv4 3 
172.17.79.135
Details IPv4 4 
172.17.79.129
Details IPv4 4 
172.17.79.136
Details IPv4 1 
172.17.19.129
Details IPv6 75 
::1