Finding a Needle in an Encrypted Haystack

Explore new techniques for exploiting the NTLM authentication protocol in this 47-minute Black Hat conference talk. Discover a critical zero-day vulnerability that allows attackers to bypass even the strictest security configurations, including server signing, and take control of any machine in a domain through NTLM Relay. Learn about innovative methods to leverage cryptographic abilities for detecting prevalent attacks on Active Directory. Presented by Marina Simakov and Yaron Zinar, this talk provides valuable insights into advanced cybersecurity threats and defensive strategies.

Finding a Needle in an Encrypted Haystack