Our Blog

A journey implementing Channel Binding on MSSQLClient.py

Reading time: ~31 min
Posted by aurelien.chalot@orangecyberdefense.com on 25 July 2025
Categories: Database, Impacket, Mssql, Ntlm, Sql, Tls
A few weeks ago my friend Zblurx pushed a PR to Impacket in which he implemented the Channel Binding Token...

Is TLS more secure? The WinRMS case.

Reading time: ~10 min
Posted by aurelien.chalot@orangecyberdefense.com on 14 April 2025
Categories: Active directory, Ntlm, Relay, Winrm
0/ TL;DR WinRM is protected against NTLMRelay as communications are encrypted. However WinRMS (the one communicating over HTTPS) is not...

Protected Users: you thought you were safe uh?

Reading time: ~10 min
Posted by aurelien.chalot@orangecyberdefense.com on 31 March 2023
Categories: Kerberos, Ntlm, Windows, Delegation, Protected users
On the 31st of October 2022, a PR on CrackMapExec from Thomas Seigneuret (@Zblurx) was merged. This PR fixed Kerberos...

Left To My Own Devices – Fast NTCracking in Rust

Reading time: ~17 min
Posted by Dominic White on 16 February 2022
Categories: Cracking, Hashcat, Ntlm, Programming, Rust, Performance
When I got a new MacBook with an M1 Pro chip, I was excited to see the performance benefits. The...