Sec posts on cve research

NT LAN Manager (NTLM) authentication is  a challenge-response scheme that is a more secure variation of Digest authentication . NTLM uses Windows credentials to transform the challenge data instead of the unencoded user name and password. NTLM authentication requires multiple exchanges between the client and server. Is NTLM used for local authentication? NTLM authentication is still supported and must be used for Windows authentication with systems configured as a member of a workgroup.  NTLM authentication is also used for local logon authentication on non-domain controller's NT LAN Manager Windows NT LAN Manager (NTLM) is a challenge-response authentication protocol used to authenticate a client to a resource on an Active Directory domain. When the client requests access to a service associated with the domain, the service sends a challenge to the client, requiring that the client perform a mathematical operation using its authentication token, and then return the result of ...