Burp Suite User Forum

Create new post

Uppercase when authenticated with NTLM

Marek | Last updated: Feb 06, 2015 02:12PM UTC

Hello, I want to report a important bug. If I use NTLM authentication burpsuite always sets uppercase letters for the login and for some case sensitive database it is problem. Thanks for repair. Excellent would be option, that what I write to login field, the same string will be in the request. Marek

PortSwigger Agent | Last updated: Feb 06, 2015 02:37PM UTC

The NTLM specification involves converting the username to upper case, and the LM hash even converts the password to upper case. Have a look at this specification and search for "uppercase": http://davenport.sourceforge.net/ntlm.html

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.