A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

AD Security Intrusion Detection System

Password Crack Framework

Enable drop-in Windows Single Sign On for popular Java web servers.

Enumerate information from NTLM authentication enabled web endpoints 🔎

Generates malicious LNK file payloads for data exfiltration

scan for NTLM directories

Finding all things on-prem Microsoft for password spraying and enumeration.

Windows NTLM Authentication Backdoor

Bruteforce HTTP Authentication

Expose Microsoft Windows SSPI to Node for SSO authentication.

本项目是一篇NTLM中高级进阶进阶文章，å?Žç»­æˆ‘也会在Githubå’ŒGitbook对此文进行æŒ?续性的更新NTLM以å?Šå¸¸è§?çš„å??议中高级进阶并计划开æº?部分å??议调试工具，望å?„ä½?issue勘误。

A set of prioritized Hashcat .hcmask files intelligently developed from terabytes of password breach datasets and organized by run time.

Identify the accounts most vulnerable to dictionary attacks

A nginx module to allow proxying requests with NTLM Authentication.

Winfoom is an HTTP(s) proxy server facade that allows applications to authenticate through the proxy without having to deal with the actual handshake.

SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

Script to perform some hashcracking logic automagically

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard (DES).