Inicio Explorar Axuda
Iniciar sesión
zhensolid
/
OperatorsKit
1
0
Fork 0
Ficheiros Incidencias 0 Pull Requests 0 Wiki
Rama: main
Ramas Etiquetas
OperatorsKit
/
KIT
/
CaptureNetNTLM
unknown 6316994674 Bug fix %!s(int64=2) %!d(string=hai) anos
..
README.md 6316994674 Bug fix %!s(int64=2) %!d(string=hai) anos
beacon.h 31e8117c71 New tool upate %!s(int64=2) %!d(string=hai) anos
bofcompile.bat 31e8117c71 New tool upate %!s(int64=2) %!d(string=hai) anos
capturenetntlm.c 6316994674 Bug fix %!s(int64=2) %!d(string=hai) anos
capturenetntlm.cna f372151154 Update capturenetntlm.cna %!s(int64=2) %!d(string=hai) anos
capturenetntlm.h 6316994674 Bug fix %!s(int64=2) %!d(string=hai) anos
capturenetntlm.o 6316994674 Bug fix %!s(int64=2) %!d(string=hai) anos

README.md

CaptureNetNTLM

Capture the NetNTLMv2 hash of the current user. This is done by simulating a NTLM authentication exchange between a client and server to capture the NetNTLMv2 hash.

Usage

  • capturenetntlm

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.

Credits

The code in this BOF is heaviliy based on the GetNTLMChallenge project from Lee Christensen.