Relay Windows logins to gain privileged access.
What it does
Guides authentication capture and NTLM relay to gain elevated access to network services.
When to use it
Use when capturing and relaying NTLM authentication, including workflows that combine relay with authentication coercion.
How to use it
Give it an NTLM relay or authentication coercion task; it provides guidance on choosing capture methods and relay targets.
Uses
RE
Good to know
- cannot be undone: /etc/responder/Responder.conf
Latest review
What you need · 1
Requires ntlmrelayx.py to run the relay listener.
Access · 5
This skill
/etc/responder/Responder.conf
Write
Changes Responder server settings (irreversible)
NTLM-enabled servers
Write
Forwards captured authentication to servers
NTLM-enabled hosts
Read
Captures hosts' NTLM authentication