Run commands in telnet to remove ntlm Authentication

 

I believe everyone is familiar with telnet. Hacking often uses built-in shell, especially injection, but ntlm authentication is the most annoying. In the past, there were two methods for removing ntlm.

1. Uploading ntml.exe has many disadvantages. For example, if the other party has anti-virus software, many network segments shield TFTP.

2. directly write the telnet configuration information to the text and execute it using shell. This method is very troublesome.

Today, I will introduce you to the methods I have been using.

That is, run the command directly:

tlntadmn config sec = -ntlm

For injection, run the following command:

;exec master.dbo.xp_cmdshell tlntadmn config sec = -ntlm--

Ntlm authentication is removed after running.