Using cached credentials (LSASS) with portable browser to access webproxy with integrated authentication (NTLM)

Question

We want to create a small portable application in our network that accesses a server on the internet using an internal proxy that requires integrated windows authentication (NTLM) from a standard domain client PC(non admin) running in
user mode after the client logged in. We wonder if such a PE is able to access cached credentials (LSASS hashes). If you read that browsers like chrome can access cached credentials with integrated
authentication I wonder if that is really possible. In my understanding no portable 3rd party application that gets executed after the user is logged in is able to access such stored hash
values (only maybe some hacker tools that run under system account can dump such hashes). But maybe it is possible. Very happy if someone can point me in the right direction.
Thx
Oliver

Answer 1

Hi Oliver,
The closest method I can relate is Kerberos Delegation, which allows an application to reuse the end-user credentials to access recourses hosted on a different server.
More information for you:
Kerberos Delegation
http://blogs.msdn.com/b/autz_auth_stuff/archive/2011/05/03/kerberos-delegation.aspx
About Kerberos constrained delegation
https://technet.microsoft.com/en-us/library/cc995228.aspx?f=255&MSPPError=-2147217396
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]