NTLMSSP 2
By mat on Monday 4 May 2009, 21:35 - Permalink
No it's not the sequel of a film, just an updated version of /public/Download/patchs/patch_ntlm_040509 patch for wireshark. This version add the following updates
- Support for DCE/RPC with direct NTLMSSP auth
- Support for DCE/RPC with SPNEGO with NTLM auth mechanism
I also started to work on the verfier verification (sic) but it didn't work for DCE/RPC (I didn't get the right HMAC MD5), and I need also to find a way to update information into wireshark to reflect the fact that MD5 (and also NT challenge also in case no good password can be found).