<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Ntlm — PoC Archive</title><link>https://poc.intelseclab.com/tags/ntlm/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sun, 05 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/ntlm/index.xml" rel="self" type="application/rss+xml"/><item><title>Microsoft Exchange Authenticated Arbitrary File Read via EWS Reference Attachment (CVE-2026-45504)</title><link>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/</link><pubDate>Sun, 05 Jul 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-45504-exchange-file-read/</guid><description>High severity — web · CVE-2026-45504. Status: PoC. Affects: Microsoft Exchange Server (OWA / EWS). Tags: exchange, owa, ews, file-read, ssrf, ntlm, soap, lfi.</description><category>web</category><category>High</category><category>exchange</category><category>owa</category><category>ews</category><category>file-read</category><category>ssrf</category><category>ntlm</category><category>soap</category><category>lfi</category></item><item><title>Windows NTLM Hash Disclosure via File Explorer - CVE-2025-24054</title><link>https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/</link><pubDate>Sun, 17 May 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-05-17_windows-ntlm-hash-disclosure-cve-2025-24054/</guid><description>Medium severity (CVSS 6.5) — binary · CVE-2025-24054. Status: Patched. Affects: Windows File Explorer (Windows Shell). Tags: NTLM, NTLMv2, hash-disclosure, zero-click, Windows, File-Explorer, UNC, SMB, credential-theft, in-the-wild, state-sponsored.</description><category>binary</category><category>Medium</category><category>NTLM</category><category>NTLMv2</category><category>hash-disclosure</category><category>zero-click</category><category>Windows</category><category>File-Explorer</category><category>UNC</category><category>SMB</category><category>credential-theft</category><category>in-the-wild</category><category>state-sponsored</category></item></channel></rss>