unknown
6316994674
Bug fix
|
2 lat temu | |
|---|---|---|
| .. | ||
| README.md | 2 lat temu | |
| beacon.h | 2 lat temu | |
| bofcompile.bat | 2 lat temu | |
| capturenetntlm.c | 2 lat temu | |
| capturenetntlm.cna | 2 lat temu | |
| capturenetntlm.h | 2 lat temu | |
| capturenetntlm.o | 2 lat temu | |
README.md
CaptureNetNTLM
Capture the NetNTLMv2 hash of the current user. This is done by simulating a NTLM authentication exchange between a client and server to capture the NetNTLMv2 hash.
Usage
capturenetntlm
Compile
- 1. Make sure Visual Studio is installed and supports C/C++.
- 2. Open the
x64 Native Tools Command Prompt for VS <2019/2022>terminal. - 3. Run the
bofcompile.batscript to compile the object file. - 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.
Credits
The code in this BOF is heaviliy based on the GetNTLMChallenge project from Lee Christensen.