🛡️ Security

Capture-Replay Attack

An attack that records a valid authentication exchange and re-sends it to gain access, exploiting the fact that the captured token is not bound to a single session or destination. Classified as CWE-294.

📚 Deep Dive

Learn Article

How NTLM Relay Attacks Bypass Authentication

NTLM relay attacks don't crack passwords, they forward a legitimate authentication to a different service. Here is how the technique works and why it keeps breaking Windows environments.

intermediate 3 min read

Back to Glossary