▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑In the authentication scheme implemented using SMB or SMB2 messages, regardless of what kind of authentication dialect will be used (LM, LMv2, NTLM, NTLM2, NTLMv2), the authentication process proceeds as follows:
#WindowsServer

1️⃣The client tries to establish a connection with the server and sends a request in which it informs the server in which dialects it is able to authenticate, for example: LM, NTLM, NTLM2, NTLMv2. Therefore, the dialect of LMv2 authentication between the client and server is excluded.

2️⃣The server from the dialect list received from the client (by default) selects the most secure dialect (for example, NTLMv2), then sends a response to the client.

3️⃣The client, having decided on the dialect of authentication, tries to access the server and sends a request to NEGOTIATE-MESSAGE.

4️⃣The server receives a request from the client and sends it a response CHALLENGEMESSAGE, which contains a random sequence of 8 bytes. It is called Server Challenge.

5️⃣The client, having received the Server Challenge sequence from the server, encrypts this sequence with its password, and then sends the server an AUTHENTICATEMESSAGE response that contains 24 bytes.

6️⃣When the server receives the response, it performs the same encryption operation of the Server Challenge sequence as the client performed. Then, comparing your results with the response from the client, on the basis of a match, allows or denies access.

Share us❤️👍🏻
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

▁ ▂ ▄ U𝕟𝔻Ⓔ𝐫6𝔬𝓓ⓔ ▄ ▂ ▁

🦑What is NBT-NS ?
#WindowsServer

> NBT-NS is NetBIOS-NS , i.e. NetBIOS Name Service.
The NetBIOS Name Service is one of three NetBIOS services: a name service (NetBIOS-NS) for registering and resolving names.

> To start sessions or distribute datagrams, the application must register its NetBIOS name using the name service. NetBIOS names are 16 octets in length and vary by implementation.

> Often the 16th octet, called the NetBIOS suffix, indicates the type of resource and can be used to tell other applications which type of service the system offers. In NBT, the name service runs on UDP port 137 (TCP port 137 can also be used, but is rarely used).

🦑NetBIOS name service primitives:

1️⃣Add name - Register a NetBIOS name.

2️⃣Add group name - Register the NetBIOS name of the group.

3️⃣Delete name - Unregisters the NetBIOS name or group name.

4️⃣Find name - Search for a NetBIOS name on the network.


NetBIOS name resolution is not supported by Microsoft for Internet Protocol Version 6 (IPv6).

Share us❤️👍🏻
written by
@UndercodeTesting
@UndercodeSecurity
@UndercodeHacking
▁ ▂ ▄ ｕ𝕟𝔻Ⓔ𝐫Ć𝔬𝓓ⓔ ▄ ▂ ▁