Matt Creel

Module to check for NTLMv1 Compatibility

2

Added a small module to query the target's `LmCompatibilityLevel` to determine if the target allows NTLMv1 auth. Example: This check queries the registry which requires admin privileges - makes it...

Add Shadow Credentials Commands to Ntlmrelayx's Interactive LDAP Shell

5

Implemented `set_shadow_creds` and `clear_shadow_creds` commands in the interactive LDAP shell used by ntlmrelayx. Code is just slightly modified from ShutdownRepo's prior work in #1249. Setting shadow creds: Confirmation msDS-KeyCredentialLink was...

Add SCCM NTLM Relay Attack

4

Adapted the [sccmwtf](https://github.com/xpn/sccmwtf) by @\_xpn\_ into a `httpattack` for `ntlmrelayx.py`. Credits go to him for almost all of the code included in this PR. The attack requires machine account authentication...

Slight quality of life modification to include the tokens in a JSON blob that can be fed into [stealer.js](https://github.com/fkasler/cuddlephish/blob/main/stealer.js) , which can automatically open a Chromium browser and inject the...