ntlm

A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

AD Security Intrusion Detection System

Password Crack Framework

Enumerate information from NTLM authentication enabled web endpoints 🔎

Enable drop-in Windows Single Sign On for popular Java web servers.

Generates malicious LNK file payloads for data exfiltration

scan for NTLM directories

Finding all things on-prem Microsoft for password spraying and enumeration.

Windows NTLM Authentication Backdoor

Bruteforce HTTP Authentication

A set of prioritized Hashcat .hcmask files intelligently developed from terabytes of password breach datasets and organized by run time.

Expose Microsoft Windows SSPI to Node for SSO authentication.

Identify the accounts most vulnerable to dictionary attacks

The DCE/RPC / MS-RPC Codegen/Client for Go

本项目是一篇NTLM中高级进阶进阶文章，后续我也会在Github和Gitbook对此文进行持续性的更新NTLM以及常见的协议中高级进阶并计划开源部分协议调试工具，望各位issue勘误。

Winfoom is an HTTP(s) proxy server facade that allows applications to authenticate through the proxy without having to deal with the actual handshake.

A nginx module to allow proxying requests with NTLM Authentication.

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard (DES).