Re: NTLM Hash in ASP.NET

From: Dieter Depuydt (dieter.spam.depuydt_at_skynet.Be)
Date: 05/28/03

  • Next message: Matjaz Ladava: "Re: Integrated security - why not?" 
    Date: Wed, 28 May 2003 15:03:06 +0200

    I've exported all users & NTLM hashed passwords from my Active Directory.
    I've putted them in a MS SQL Database (on a server outside my network). I
    want to use those NTLM hashes to check the users password when they want to
    login to my website.

    This is the only way to make sure that passwords in my network = passwords
    on my website.

    > why do you need an NTLM hash? there's little you can do with it!! if you

  • Next message: Matjaz Ladava: "Re: Integrated security - why not?"

    Relevant Pages

    • Re: [fw-wiz] Stanford break in
      ... Are network synchronized passwords a bad idea, ... > physical and logical security of accounts (ie: ... > Authenticate with the server, but only allow access to one workstation. ...
      (Firewall-Wizards)
    • RE: should i bother??
      ... > (network address translation from a public IP to a private network is always advised here) ... certain outgoing ports on the firewall at work. ... I run root kit hunter as a daily cron job. ... > Strong passwords of random letters, with at least two numbers and two special characters for all accounts, definately root. ...
      (Fedora)
    • Re: FW: Hydra or network logon cracker for Windows?
      ... Couldn't you just Nmap your whole Network and dump the IP's of the Windows ... passwords such as the company name and so forth. ... > Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
      (Security-Basics)
    • Re: FW: Hydra or network logon cracker for Windows?
      ... have to suffer through LIXUX/UNIX/APPLE machines on the network. ... passwords such as the company name and so forth. ... Original> against a small list of passwords like Tomcat, Tomcat1, TomCat, ... Original> EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ...
      (Security-Basics)
    • FW: Hydra or network logon cracker for Windows?
      ... login as Administrator is most definitely a "battle worth fighting". ... Given that, if I were to test for your list of passwords on my network, I ... Original> against a small list of passwords like Tomcat, Tomcat1, TomCat, ...
      (Security-Basics)