Tool to extract NTLMv2 hashes from PCAP files

Script to perform some hashcracking logic automagically

PowerShell script to audit NTLM authentication events from Windows Security and NTLM Operational logs. Filters by NTLMv1/v2, failed logons, privileged sessions (4672), date ranges, and null sessions. Validates NTLM audit GPO settings. Targets localhost, remote servers, domain controllers, or an entire AD forest.

py-ntlm-proxy is an NTLM/NTLMv2 authenticating HTTP proxy. think of a modernize "cntlm" :)

CVE-2025-24071: NTLMv2 Hash Disclosure via .library-ms File

A Rust implementation of NTLM and NetNTLMv2 hashing for password security analysis and authentication testing.

A tool to find out if some gathered NetNTLMv2 hashes represent empty passwords

NTLMv2 Filter

Compute Windows NTLMv2 password hashes

Docker-based platform for conducting MultiRelay attacks using Responder.

NTLM reverse proxy in go

NTLM Client and Server library for Go

Windows Authentication in Rust / SSO

Converts John The Ripper/Cain format hashes (singular, or in bulk) to HashCat compatible hash format.

Golang library implementing NTLM

Windows NTLM hash dump utility written in C language, that supports Windows and Linux. Hashes can be dumped in realtime or from already saved SAM and SYSTEM hives.

POCs for CVE-2025-50154 and CVE-2025-59214, zero day vulnerabilities on windows file explorer disclosing NTLMv2-SSP without user interaction. It is a bypass for the CVE-2025-24054 Security Patch

Script to perform some hashcracking logic automagically