Cross-context proxy authentication coercion
Named by 2 kept items in this workspace.
Search every workspace for Cross-context proxy authentication coercion. It matches the name as written, so it can find other things that share it.
The items that name it 2
A proxy configured by an unprivileged user causes NCSI to negotiate NTLM with an attacker-controlled proxy from a service security context (NETWORK SERVICE), without impersonating the user; classified by Microsoft as Moderate - Spoofing under Windows Security Servicing Criteria
A proxy configured via one user's HKCU (WinINet) is propagated into NCSI's service-context (NETWORK SERVICE/netprofm) WinHTTP probe, causing the service to authenticate to an attacker-controlled proxy using the machine/service principal instead of the originating user
All techniques in this workspace.