Azure / go-ntlmssp

NTLM/Negotiate authentication over HTTP
MIT License
189 stars 67 forks source link

Encrypted NTLM Connection #29

Closed mertcelen closed 4 years ago

mertcelen commented 4 years ago

I was wondering if it's possible to provide encrypted ntlm request via 5985. I know the fact that it's not ideal but many Windows applications use it that way because it's always enabled like this in servers by default and it's dead simple to enable it clients via GPO. Microsoft have this post about how dangerous it is without encryption. https://devblogs.microsoft.com/powershell/compromising-yourself-with-winrms-allowunencrypted-true/