NTLM Relay Attack Module

Versionv1.7

Updated2026-10-19

CategoryRed Team Tools

NTLM Relay Attack Module

$99.99

NTLM relay toolkit with REAL SPNEGO (BER TLV NegTokenInit/Resp), a raw SMB2 client (negotiate + session_setup with ParseChallenge), LDAP SASL NTLM bind and HTTP relay. Capture mode emits a real Type2 challenge and exports hashcat-ready NetNTLMv2.

Add to Cart Buy Now

Key Features

• SPNEGO wrapper (ASN.1/BER) for NTLM auth
• Raw SMB2 client: negotiate, session_setup, NTLM challenge parse
• Relays: LDAP SASL (BER bind), HTTP (urllib)
• Capture-only server: real Type2 + session cookie; verified NetNTLMv2 (NTProofStr == HMAC-MD5(NThash, challenge+blob), hashcat -m 5600)

Requirements

Python 3 stdlib (no external deps).

Changelog

v1.7 — real SPNEGO + SMB2 session setup; NetNTLMv2 output verified against HMAC-MD5.

Package Contents

Exact contents of the download archive (2 files):

ntlm_relay.py	19,848 B
README.md	599 B