It Just Keeps Going and Going

No ratings

Presented at NolaCOn 2014 by

"SMB Relay". "Man-in-the-Middle". Did we catch your attention? This presentation will describe our journey from a simple idea to weaponize SMB Relay, to the development of a general MitM strategy. We will showcase the insecurity of authenticated sessions over various protocols including SMB, MySQL, and Telnet, and present a practical exploitation framework (written in NodeJS) you can use today that allows you to steal, keep, and reuse sessions as many times as you want without the user knowing.