Netntlmv2 on Łukasz Pastuszak - security noteshttps://lukaszpastuszak.dev/tags/netntlmv2/Recent content in Netntlmv2 on Łukasz Pastuszak - security notesHugoen-usSun, 06 Sep 2026 00:00:00 +0000Sniperhttps://lukaszpastuszak.dev/writeups/sniper/Sun, 06 Sep 2026 00:00:00 +0000https://lukaszpastuszak.dev/writeups/sniper/LFI in a language parameter plus PHP session poisoning gives RCE as IUSR, a leaked database password reused via PSCredential reaches chris, and a malicious CHM captures the administrator's Net-NTLMv2 for SYSTEM.