Results for “ntlm”
12 skills
mukul975 hunting-for-ntlm-relay-attacks
Detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain.
24.6k · bundle
mukul975 relaying-ntlm-for-adcs-esc8
Coerce a domain controller to authenticate to an attacker-controlled host and relay that NTLM authentication to an AD CS web enrollment endpoint to obtain a certificate for the DC machine account, enabling full domain compromise via DCSync.
24.6k · bundle
mukul975 detecting-pass-the-hash-attacks
Hunt for Pass-the-Hash attacks by analyzing NTLM authentication patterns, identifying Type 3 logons where Kerberos is expected, and correlating with credential dumping indicators.
24.6k · bundle
More results
mukul975 detecting-lateral-movement-with-zeek
Analyze Zeek network logs to detect lateral movement techniques including SMB admin share access, DCE/RPC remote service creation, NTLM account spray, Kerberos anomalies, and large internal data transfers.
24.6k · bundle
ssrjkk nltk-ner
NER with Nltk. named entity recognition.
2 · bundle
kbarbel640-del rlm
Executes Python code iteratively via an MCP bridge to produce verified results for calculations, data analysis, and task decomposition.
1 · bundle
jiachen-t-wang dclm-datacomp-for-language-models-arxiv-2406-11794v3
DCLM: DataComp for Language Models
6
mukul975 coercing-authentication-with-coercer-petitpotam
Trigger machine account authentication with PetitPotam (MS-EFSR) and Coercer across MS-RPRN, MS-DFSNM, and MS-FSRVP to feed NTLM relay into AD CS Web Enrollment (ESC8) and other relay targets.
24.6k · bundle
demerzels-lab rlm
Executes Python code iteratively via an MCP bridge to produce verified results for calculations, data analysis, and task decomposition.
10 · bundle
hoangnguyen0403 nestjs-database
Implement data access patterns, Scaling, Migrations, and ORM selection in NestJS. Use when implementing TypeORM/Prisma repositories, migrations, or database patterns in NestJS.
542 · bundle
bytesagain nlp
Process text with NLP. Use when tokenizing, analyzing sentiment, extracting entities, summarizing documents, or measuring similarity.
12 · bundle
mukul975 exploiting-smb-vulnerabilities-with-metasploit
Identifies and exploits SMB protocol vulnerabilities using Metasploit Framework during authorized penetration tests to demonstrate risks from unpatched Windows systems, misconfigured shares, and weak authentication in enterprise networks.
24.6k · bundle