Name is required.
Email address is required.
Invalid email address
Answer is required.
Exceeding max length of 5KB

Uppercase when authenticated with NTLM

Marek Šottl Feb 06, 2015 02:12PM UTC

Hello,
I want to report a important bug. If I use NTLM authentication burpsuite always sets uppercase letters for the login and for some case sensitive database it is problem.

Thanks for repair. Excellent would be option, that what I write to login field, the same string will be in the request.

Marek


Dafydd Stuttard Feb 06, 2015 02:38PM UTC Support Center agent

The NTLM specification involves converting the username to upper case, and the LM hash even converts the password to upper case. Have a look at this specification and search for “uppercase”:

http://davenport.sourceforge.net/ntlm.html


Post Your public answer

Your name
Your email address
Answer