dumpntlminfo.py
Perform NTLM authentication against a remote host without credentials and dump information leaked in the NTLMSSP message. tldr-pages
On several platforms
Several platforms
Perform NTLM authentication against a remote host without credentials and dump information leaked in the NTLMSSP message. Part of the Impacket suite.
Dump NTLM info from target (SMB, default port 445)
DumpNTLMInfo.py targetIdentifyDump NTLM info using a specific IP
DumpNTLMInfo.py -target-ip target_ip targetIdentifySpecify a custom port
DumpNTLMInfo.py -port port targetIdentifyDump NTLM info using RPC protocol (default port 135)
DumpNTLMInfo.py -protocol RPC -port 135 targetIdentifyTurn on debug output
DumpNTLMInfo.py -debug targetIdentify