writeups.xyz / NTLM Credential Theft in Python Windows Applications

Submitter : c2a

Date: 23 August 2024

Bounty : undisclosed

Vulnerabilities :

• SSRF
• NTLMv2 Hash Disclosure
• NTLM
• Security Code Review

Programs :

• Python
• Hugging Face (Gradio)
• Werkzeug
• Jupyter
• Snowflake (Streamlit)

Authors :

• Naveen Sunkavally

Link :
https://www.horizon3.ai/attack-research/disclosures/ntlm-credential-theft-in-python-windows-applications/