Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the Option to Dump Ntlm Hashes in Ntlmrelayx #1904

Merged
merged 4 commits into from
Mar 11, 2025

Conversation

p0rtL6
Copy link
Contributor

@p0rtL6 p0rtL6 commented Feb 25, 2025

This branch adds the option to dump ntlm hashes to the console during runtime in ntlmrelayx using -dh or --dump-hashes.

Examples Updated:

  • ntlmrelayx.py
  • dnstool.py
  • printerbug.py
  • krbrelayx.py

Modified Libraries:

  • smbserver.py
  • httprelayserver.py
  • rawrelayserver.py
  • smbrelayserver.py
  • wcfrelayserver.py
  • config.py

The above is copied from the updated README file for this branch, if merged, the README will need to be updated.

@gabrielg5
Copy link
Collaborator

Hi @p0rtL6,

I'd just write down the hash, similar as to what is Done in smbserver

smbServer.log(ntlm_hash_data['hash_string'])

(without the pre and next message of dump done)

That way, output is much cleaner. I think context is not lost, as hash would be written right after the Authentication Succeed message

@gabrielg5 gabrielg5 self-assigned this Feb 28, 2025
@p0rtL6
Copy link
Contributor Author

p0rtL6 commented Feb 28, 2025

@gabrielg5 Thanks for the suggestion, I have simplified the print statements.

@anadrianmanrique anadrianmanrique added the medium Medium priority item label Mar 6, 2025
Reverted changes in the README.md file in preparation for merge.
@gabrielg5 gabrielg5 merged commit 678cd0a into fortra:master Mar 11, 2025
8 checks passed
@gabrielg5
Copy link
Collaborator

To master... Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
medium Medium priority item
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants