Penetration Testing mailing list archives
Avoid sending current credentials automatically over the network
From: "Umil" <umil () hotmail com>
Date: Tue, 13 Feb 2007 12:21:16 -0300
Hi allWhen mapping a network share without any credentials parameter or when clicking in a link for a internal app Windows and IE automatically send the current users credentials automatically. Aparently for IE you can configure to send anonymous creds (guest account) and then ask for creds. However over the network there is no option to avoid sending current users creds automatically. I tried smb signing but it didn't work.
Does anyone know a solution for it? ThanksUno
------------------------------------------------------------------------ This List Sponsored by: Cenzic Need to secure your web apps? Cenzic Hailstorm finds vulnerabilities fast. Click the link to buy it, try it or download Hailstorm for FREE. http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW ------------------------------------------------------------------------
Current thread:
- Avoid sending current credentials automatically over the network Umil (Feb 13)
- RE: Avoid sending current credentials automatically over the network Shenk, Jerry A (Feb 13)
- RE: Avoid sending current credentials automatically over the network Gadi Evron (Feb 14)
- <Possible follow-ups>
- RE: Avoid sending current credentials automatically over the network McCarty, Eric C. (Feb 15)
- Re: Avoid sending current credentials automatically over the network Thor (Hammer of God) (Feb 15)
- Re: Avoid sending current credentials automatically over the network Thor (Hammer of God) (Feb 17)
- RE: Avoid sending current credentials automatically over the network Shenk, Jerry A (Feb 13)