A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

AD Security Intrusion Detection System

Extract Windows credentials directly from VM memory snapshots and virtual disks

Windows protocol library, including SMB and RPC implementations, among others.

Feature-rich single-binary file server for red teamers and developers. HTTP/S · WebDAV · SFTP · SMB · NTLM hash capture · DNS/SMTP callbacks · TLS · Auth · Share links. A powerful python3 -m http.server replacement.

Password Crack Framework

Enumerate information from NTLM authentication enabled web endpoints 🔎

Enable drop-in Windows Single Sign On for popular Java web servers.

Generates malicious LNK file payloads for data exfiltration

scan for NTLM directories

Finding all things on-prem Microsoft for password spraying and enumeration.

Windows NTLM Authentication Backdoor

The DCE/RPC / MS-RPC Codegen/Client for Go

Bruteforce HTTP Authentication

A set of prioritized Hashcat .hcmask files intelligently developed from terabytes of password breach datasets and organized by run time.

Expose Microsoft Windows SSPI to Node for SSO authentication.

Identify the accounts most vulnerable to dictionary attacks

Winfoom is an HTTP(s) proxy server facade that allows applications to authenticate through the proxy without having to deal with the actual handshake.

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

本项目是一篇NTLM中高级进阶进阶文章，后续我也会在Github和Gitbook对此文进行持续性的更新NTLM以及常见的协议中高级进阶并计划开源部分协议调试工具，望各位issue勘误。