Penetration Testing: Re: IIS 5.0 with Integrated Window Authentication

[Sebastian Flothow <sebastian () flothow de>]

> The goofy three-message exchange that sets up the NTLM security doesn't 
> seem to make it through the proxy,
AFAIK, NTLM _can_ _not_ work through proxies, by design. It seems it 
includes the client's IP address, which then doesn't match that of the 
proxy (which is the client from the server's point of view), or 
something similar.

Sebastian

--
Sebastian Flothow
sebastian () flothow de
#include <stddisclaimer.h>


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/