A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.

AD Security Intrusion Detection System

Password Crack Framework

Enable drop-in Windows Single Sign On for popular Java web servers.

Enumerate information from NTLM authentication enabled web endpoints 🔎

Generates malicious LNK file payloads for data exfiltration

scan for NTLM directories

Finding all things on-prem Microsoft for password spraying and enumeration.

Windows NTLM Authentication Backdoor

Bruteforce HTTP Authentication

Expose Microsoft Windows SSPI to Node for SSO authentication.

本项目是一篇NTLM中高级进阶进阶文章，后续我也会在Github和Gitbook对此文进行持续性的更新NTLM以及常见的协议中高级进阶并计划开源部分协议调试工具，望各位issue勘误。

A set of prioritized Hashcat .hcmask files intelligently developed from terabytes of password breach datasets and organized by run time.

Identify the accounts most vulnerable to dictionary attacks

A nginx module to allow proxying requests with NTLM Authentication.

Winfoom is an HTTP(s) proxy server facade that allows applications to authenticate through the proxy without having to deal with the actual handshake.

SMBExec implementation in Nim - SMBv2 using NTLM Authentication with Pass-The-Hash technique

A tool for performing light brute-forcing of HTTP servers to identify commonly accessible NTLM authentication endpoints.

A C# / .Net interface to the Win32 SSPI authentication API

ShuckNT is the script of Shuck.sh online service for on-premise use. It is design to dowgrade, convert, dissect and shuck authentication token based on Data Encryption Standard (DES).