arno0x / ntlmrelaytoews Goto Github PK

Would it be possible to add support for getting shells via outlook forms as described here: https://sensepost.com/blog/2017/outlook-forms-and-shells/ ?

Will this save the hashes and challenges it receives so it can be cracked offline as well?

I know it is kinda defeat the purpose of the tools , but as ruler doesnt support internal connection (over tcp ) it would be great if this tool would accept user/password/hash to allow internal rules provisioning where bulk creds are already available

Hi ,
trying to relay connection against my exchange 2013 I'm getting
`Hi , trying to relay

HTTPD: Received connection from 127.0.0.1, attacking target 192.168.1.64 [-] Connection against target 192.168.1.64 FAILED [-] [SSL: VERSION_TOO_LOW] version too low (_ssl.c:661)

I'm using local Kali as the relay server (dont have access to exchange externally ) .

thanks for the help

Worth logging the NetNTLMv2 hash?

https://github.com/sinnaj-r/NTLMssp-Extract

We can also use that in TCPDump I guess.

	parser.add_argument("-f","--folder", action="store", choices=['inbox', 'sentitem', 'deleteditems', 'tasks','calendar','contacts'], help='The Exchange folder name to list')

when we receive sentitems folders from getfolder action,we must choose sentitems but not sentitem