NTLMRecon - A Tool For Performing Light Brute-Forcing Of HTTP Servers To Identify Commonly Accessible NTLM Authentication Endpoints - RedPacket Security
Tags
| attack-pattern: | Data Multi-Factor Authentication - T1556.006 Python - T1059.006 Server - T1583.004 Server - T1584.004 Web Services - T1583.006 Web Services - T1584.006 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 746605ed-a941-4c1d-8e1c-a5907359a37e |
| Fingerprint | 363dcc874af6a4dd |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | May 7, 2023, 10:01 p.m. |
| Added to db | May 7, 2023, 11:18 p.m. |
| Last updated | Nov. 17, 2024, 11:40 p.m. |
| Headline | RedPacket Security |
| Title | NTLMRecon - A Tool For Performing Light Brute-Forcing Of HTTP Servers To Identify Commonly Accessible NTLM Authentication Endpoints - RedPacket Security |
| Detected Hints/Tags/Attributes | 25/1/21 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 361 | ✔ | RedPacket Security | https://www.redpacketsecurity.com/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Url | 1 | https://autodiscover.contoso.com/autodiscover/autodiscoverservice.svc/root |
|
| Details | Url | 1 | https://autodiscover.contoso.com/autodiscover/autodiscover.xml |
|
| Details | Url | 1 | https://autodiscover.contoso.com/oab |
|
| Details | Url | 1 | https://autodiscover.contoso.com/rpc |
|
| Details | Url | 1 | https://www.praetorian.com/blog/automating-the-discovery-of-ntlm-authentication-endpoints |
|
| Details | Domain | 4128 | github.com |
|
| Details | Domain | 1 | autodiscover.contoso.com |
|
| Details | Domain | 1 | msexch1.na |
|
| Details | Domain | 1 | adfs.contoso.com |
|
| Details | Domain | 4 | corp.contoso.com |
|
| Details | Domain | 1 | msexch1.corp.contoso.com |
|
| Details | Domain | 21 | contoso.com |
|
| Details | Domain | 10 | www.praetorian.com |
|
| Details | File | 7 | autodiscover.xml |
|
| Details | File | 17 | exchange.asmx |
|
| Details | Github username | 7 | praetorian-inc |
|
| Details | Url | 1 | https://autodiscover.contoso.com |
|
| Details | Url | 1 | https://autodiscover.contoso.com/ews |
|
| Details | Url | 1 | https://adfs.contoso.com |
|
| Details | Url | 1 | https://adfs.contoso.com/adfs/services/trust/2005/windowstransport |
|
| Details | Url | 1 | https://autodiscover.contoso.com/autodiscover |