SamrSetInformation2 (was Re: coding binge coming on.)

[Matt Chapman]

Todd Sabin wrote:

> How does NT generate its session keys?

>From memory, both challenges are added together and MD4'd with the password.

> Is knowing the password and
> having the sniff enough to determine the session key,

Yep, as long as you have the complete sniff including the
NetRequestChallenge etc.

    Matt


--
Matt Chapman
m.chapman at student.unsw.edu.au