pentester.land· Nov 22, 2021· by Romain Carnus, Maxime Nadeau, Julien Pineault, Mathieu Novis

GoSecure Investigates Abusing Windows Server Update Services (WSUS) to Enable NTLM Relaying Attacks

Open Original Article ↗
Target Program: Microsoft
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Local Privilege Escalation