search

Arno0x / NtlmRelayToEWS

ntlm relay attack to Exchange Web Services
GNU General Public License v3.0
328 stars 60 forks source link

Save hashes #3

Closed PowerPress closed 7 years ago

PowerPress commented 7 years ago

Will this save the hashes and challenges it receives so it can be cracked offline as well?

Arno0x commented 7 years ago

Yes, by setting the -o flag and specifying a file name, all netNTLM hashes as well as the corresponding challenge used are saved in this file.

It can then be cracked offline if needed, using hashcat for instance: https://hashcat.net/forum/thread-2939.html