Check for NTLMv2 Capture
checklist
Summary
If the captured hash will not crack, relay it instead.
Walkthrough
Run Responder to poison LLMNR/NBT-NS/mDNS and capture NetNTLMv2 hashes from hosts. A captured hash can be cracked offline or relayed for authentication.
Commands
bash
sudo responder -I <INTERFACE>