Penetration Testing mailing list archives

Avoid sending current credentials automatically over the network


From: "Umil" <umil () hotmail com>
Date: Tue, 13 Feb 2007 12:21:16 -0300

Hi all


When mapping a network share without any credentials parameter or when clicking in a link for a internal app Windows and IE automatically send the current users credentials automatically. Aparently for IE you can configure to send anonymous creds (guest account) and then ask for creds. However over the network there is no option to avoid sending current users creds automatically. I tried smb signing but it didn't work.
Does anyone know a solution for it?
Thanks
Uno

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.

http://www.cenzic.com/products_services/download_hailstorm.php?camp=701600000008bOW
------------------------------------------------------------------------


Current thread: