eladshamir/Internal-Monologue: Internal Monologue Attack: Retrieving NTLM Hashes without Touching LSASS
November 30, 2022 at 2:57:37 PM UTC - permalink -

- https://github.com/eladshamir/Internal-Monologue

mlgualtieri/NTLMRawUnHide: NTLMRawUnhide.py is a Python3 script designed to parse network packet capture files and extract NTLMv2 hashes in a crackable format. The following binary network packet capture formats are supported: *.pcap *.pcapng *.cap *.etl
September 28, 2022 at 2:42:02 PM UTC - permalink -

- https://github.com/mlgualtieri/NTLMRawUnHide

snowytoxa/selfhash: SysCon14 release
March 14, 2022 at 5:04:10 PM UTC - permalink -

- https://github.com/snowytoxa/selfhash

fortalicesolutions.com/posts/elevating-with-ntlmv1-and-the-printer-bug
December 9, 2021 at 10:14:04 AM UTC - permalink -

- https://www.fortalicesolutions.com/posts/elevating-with-ntlmv1-and-the-printer-bug

nccgroup/keimpx: Check for valid credentials across a network over SMB
October 26, 2020 at 2:06:37 PM UTC - permalink -

- https://github.com/nccgroup/keimpx

ntlm_theft: A file payload generator for forced ntlm hash disclosure
June 9, 2020 at 2:29:15 PM UTC * - permalink -

- https://medium.com/greenwolf-security/ntlm-theft-a-file-payload-generator-for-forced-ntlm-hash-disclosure-2d5f1fe5b964

Practical guide to NTLM Relaying in 2017 (A.K.A getting a foothold in under 5 minutes) // byt3bl33d3r // /dev/random > blog.py
October 29, 2019 at 3:50:31 PM UTC - permalink -

- https://byt3bl33d3r.github.io/practical-guide-to-ntlm-relaying-in-2017-aka-getting-a-foothold-in-under-5-minutes.html

Places of Interest in Stealing NetNTLM Hashes – 🔐Blog of Osanda
October 29, 2019 at 3:39:42 PM UTC - permalink -

- https://osandamalith.com/2017/03/24/places-of-interest-in-stealing-netntlm-hashes/amp/?__twitter_impression=true

Windows Logon Forensics - windows-logon-forensics-34132
October 15, 2019 at 4:29:07 PM UTC * - permalink -

- https://www.sans.org/reading-room/whitepapers/forensics/windows-logon-forensics-34132

SMB Share – SCF File Attacks | Penetration Testing Lab
June 3, 2019 at 10:00:47 AM UTC - permalink -

- https://pentestlab.blog/2017/12/13/smb-share-scf-file-attacks/

The worst of both worlds: Combining NTLM Relaying and Kerberos delegation - dirkjanm.io
March 7, 2019 at 7:13:22 PM UTC - permalink -

- https://dirkjanm.io/worst-of-both-worlds-ntlm-relaying-and-kerberos-delegation/