Abusing NTLM Relay and Pass-The-Hash for Admin | by Julian Runnels | InfoSec Write-ups
Initial Access | wiki.mrasec
Remote NTLM Relaying via Meterpreter
Red Teaming Made Easy with Exchange Privilege Escalation and PowerPriv
From Stranger to DA // Using PetitPotam to NTLM relay to Domain Administrato - Truesec
Using HTTPS socks doesn't seem to work · Issue #642 · SecureAuthCorp/impacket · GitHub
ADCS + PetitPotam NTLM Relay: Obtaining krbtgt Hash with Domain Controller Machine Certificate - Red Teaming Experiments
ntlmrelayx - Twitter Search
mitm6 – compromising IPv4 networks via IPv6 – Fox-IT International blog
ADCS + PetitPotam NTLM Relay: Obtaining krbtgt Hash with Domain Controller Machine Certificate - Red Teaming Experiments
mpgn on Twitter: "In case you want to see something cool about CrackMapExec, ntlmrelayx and Responder 😌😋 1⃣ Responder -I eth0 2⃣ https://t.co/uaVzXZLXfG -t <ip> -smb2support -socks 3⃣ proxychains crackmapexec smb <ip> -
Abusing NTLM Relay and Pass-The-Hash for Admin | by Julian Runnels | InfoSec Write-ups
How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks - Praetorian
ntlmrelayx.py SOCKS option TypeError with socks5 · Issue #1025 · SecureAuthCorp/impacket · GitHub
Playing with Relayed Credentials – SecureAuth
Abusing NTLM Relay and Pass-The-Hash for Admin | by Julian Runnels | InfoSec Write-ups
ntlmrelayx SOCKS module · Issue #657 · SecureAuthCorp/impacket · GitHub
ntlmrelayx.py -socks MSSQL Port · Issue #483 · SecureAuthCorp/impacket · GitHub
Privilege Escalation in Active Directory | wiki.mrasec
Admin's Nightmare: Combining HiveNightmare/SeriousSAM and AD CS Attack Path's for Profit - Black Hills Information Security
Playing with Relayed Credentials – SecureAuth
Abusing NTLM Relay and Pass-The-Hash for Admin | by Julian Runnels | InfoSec Write-ups
How to Exploit Active Directory ACL Attack Paths Through LDAP Relaying Attacks - Praetorian
Using HTTPS socks doesn't seem to work · Issue #642 · SecureAuthCorp/impacket · GitHub
Remote NTLM relaying through meterpreter on Windows port 445 – DiabloHorn
Red Teaming Made Easy with Exchange Privilege Escalation and PowerPriv
