Free ntlm auth software for windows

Microsoft Web Client NTLM Authentication Vulnerability Patch (Windows Me) MS01-001 is regarded as an innovative and versatile patch which eliminates a security vulnerability in a component that ships with Microsoft Office 2000, Windows 2000, and Windows Me.

The vulnerability could, under certain circumstances, allow a malicious user to obtain cryptographically protected logon credentials from another user when requesting an Office document from a Web server.

The Web Extender Client (WEC) is a component that ships as part of Office 2000, Windows 2000, and Windows Me. WEC allows IE to view and publish files via Web folders, similar to viewing and adding files in a directory through Windows Explorer. Due to an implementation flaw, WEC does not respect the IE Security settings regarding when NTLM authentication will be performed. Instead, WEC will perform NTLM authentication with any server that requests it. If a user established a session with a malicious user's Web site, either by browsing to the site or by opening an HTML mail that initiated a session with it, an application on the site could capture the user's NTLM credentials. The malicious user could then use an offline brute-force attack to derive the password or, with specialized tools, could submit a variant of these credentials in an attempt to access protected resources.

The vulnerability would only provide the malicious user with the cryptographically protected NTLM authentication credentials of another user. It would not, by itself, allow a malicious user to gain control of another user's computer or to gain access to resources to which that user was authorized access. In order to leverage the NTLM credentials (or a subsequently cracked password), the malicious user would have to be able to remotely logon to the target system.

However, best practices dictate that remote logon services be blocked at border devices, and if these practices were followed, they would prevent an attacker from using the credentials to logon to the target system.

Frequently asked questions regarding this vulnerability can be found here.

The Web Extender Client (WEC) is a component that ships as part of Office 2000, Windows 2000, and Windows Me. WEC allows IE to view and publish files via web folders, similar to viewing and adding files in a directory through Windows Explorer. Due to an implementation flaw, WEC does not respect the IE Security settings regarding when NTLM authentication will be performed ? instead, WEC will perform NTLM authentication with any server that requests it. If a user established a session with a malicious user?s web site ? either by browsing to the site or by opening an HTML mail that initiated a session with it ? an application on the site could capture the user?s NTLM credentials. The malicious user could then use an offline brute force attack to derive the password or, with specialized tools, could submit a variant of these credentials in an attempt to access protected resources. The vulnerability would only provide the malicious user with the cryptographically protected NTLM authentication credentials of another user. It would not, by itself, allow a malicious user to gain control of another user?s computer or to gain access to resources to which that user was authorized access. In order to leverage the NTLM credentials (or a subsequently cracked password), the malicious user would have to be able to remotely logon to the target system. However, best practices dictate that remote logon services be blocked at border devices, and if these practices were followed, they would prevent an attacker from using the credentials to logon to the target system. This download is for Windows ME (without Office 2000 installed).

Winrtgen is software application that acts like a graphical Rainbow Tables Generator.
Winrtgen supports LM, FastLM, NTLM, LMCHALL, HalfLMCHALL, NTLMCHALL, MSCACHE, SHA1, RIPEMD160, MySQL323, MySQLSHA1, MD2, MD4, MD5, CiscoPIX, ORACLE, SHA-2 (256), SHA-2 (384) and SHA-2 (512) hashes

SMTP Client Deux is a 4th Dimension component that gives you a complete implementation of the SMTP protocol.
SMTP Client Deux works on top of the commercial TCP Deux 4D component, also available from Deep Sky Technologies, Inc.
With the SMTP Client Deux component, a 4th Dimension developer has complete implementation of the SMTP protocol from within 4D. The protocol relies on the TCP Deux component for all TCP communication needs, thereby removing any reliance on current or future TCP plugins which are available for use in 4D. The implementation of SMTP within the SMTP Client Deux component also eliminates long bugs and anomalies that have existed in plugin implementations of the SMTP protocol.
Main features:
- Simple and direct email sending (e.g. QuickSend);
- Single method access for sending HTML email;
- Full support for one or more attachments;
- Built in attachment encoding for error free operation;
- Full support for SMTP AUTH;
- Full support for NTLM, the proprietary SMTP AUTH scheme commonly commonly used by Microsoft products;
- Full support for specifying content-type for attachments;
- Full support for specifying content-type of email body (e.g. for HTML email);
- Complete email header field control;
- Utility routines for formatting and encoding attachments;
- Utility routines for formatting recipients;
- More than two dozen different email header lines supported;
- Custom constants to speed the creation of complex emails;
- Fully cross-platform and native implementation for SMTP protocol;
- Compatibility with 4D v6.7.x, 4D v6.8.x, and 4D v7.0.x (4D 2003);
- Support for 4D v6.8.x and 4D v7.0.x (4D 2003) under Carbon, providing compatibility with MacOS 8/9, MacOS X, and Windows 98/2000/NT/XP;
- Support for encoding for Chinese and Japanese targeted emails.
Note: This a peepware version. (http://www.deepskytech.com/prod_components/smtp_client_deux/pricing.html)