Merge pull request Orange-Cyberdefense#56 from naksyn/patch-1

LmCompatibilityLevel value correction
SoufianEly · Oct 7, 2022 · 69ae1a1 · 69ae1a1
2 parents 28d4010 + 1af7d08
commit 69ae1a1
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/ansible/roles/vulns/ntlmdowngrade/tasks/main.yml b/ansible/roles/vulns/ntlmdowngrade/tasks/main.yml
@@ -1,7 +1,8 @@
 # values : https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level
+# NTLMv1 downgrade attacks are possible with LmCompatibilityLevel 2 and below
 - name: Enable LmCompatibilityLevel
   win_regedit:
     path: HKLM:\System\CurrentControlSet\Control\Lsa
     name: LmCompatibilityLevel
-    data: 0x3
-    type: dword
+    data: 0x2
+    type: dword