← Back to search

Check for NTLMv2 Capture

ad enumchecklist

Summary

If the captured hash will not crack, relay it instead.

Walkthrough

Run Responder to poison LLMNR/NBT-NS/mDNS and capture NetNTLMv2 hashes from hosts. A captured hash can be cracked offline or relayed for authentication.

Commands

bash

sudo responder -I <INTERFACE>