Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[AArdvark]

Windows Relay Attack For Non-Local Systems
http://www.csoonline.com/article/2966120/security/researchers-find-way-to-steal-windows-active-directory-credentials-from-the-internet.html#tk.rss_all

An attack using the SMB file sharing protocol that has been believed to work only within local area networks for over a decade can also be executed over the Internet, two researchers showed at the Black Hat security conference.

===========================================================================

(Yet another instance of attack the 'common everyday' protocols)
Ensure that ports 137, 138, 139 & 445 are not allowed to go out over the Internet.
(Block in your firewall)

Update: Fixed Typo

[Weaver]

> Ensure that ports 137, 138, 139 & 443 are not allowed to go out over the Internet.

Was already done.

    <rule-set name="Out block: ports blocked" target-port="135-139 445 3544" target-interface="PPPoE" no-match-action="reject"/>


! Don't you mean 445, rather than 443 ?

[AArdvark]

@weaver
Yes, I cannot type
Sometimes your fingers type what they want !!


Sent from my LG-D855 using Tapatalk

[Weaver]

> Sometimes your fingers type what they want

Don't I know it! :-)