Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Login to post

Uppercase when authenticated with NTLM

Marek | Last updated: Feb 06, 2015 02:12PM UTC

Hello, I want to report a important bug. If I use NTLM authentication burpsuite always sets uppercase letters for the login and for some case sensitive database it is problem. Thanks for repair. Excellent would be option, that what I write to login field, the same string will be in the request. Marek

PortSwigger Agent | Last updated: Feb 06, 2015 02:37PM UTC

The NTLM specification involves converting the username to upper case, and the LM hash even converts the password to upper case. Have a look at this specification and search for "uppercase": http://davenport.sourceforge.net/ntlm.html

You need to Log in to post a reply. Or register here, for free.