From XML External Entity to NTLM Domain Hashes On 2 Feb, 2018 By Gianluca Baldi During this article I will show how it is possible to obtain NTLM password hashes from a Windows Web Server by chaining some well-known web vulnerabilities with internal network misconfigurations.…