NTLM Category

blog
8+ Note
Focus
OSCP · Red Team
Structure
Recon → Exploit

NTLM blog

Filters

  • CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes
    windows

    CredNinja: Validate SMB Credentials with NTLM Passwords and Hashes

    Use CredNinja to validate passwords and NTLM hashes via SMB, find local admin, perform Pass-the-Hash and user hunting, and reduce lockouts with stripe and delay.

    Discover more Discover more
  • pth-net: Guide to Pass-the-Hash with Samba over SMB/RPC
    tools

    pth-net: Guide to Pass-the-Hash with Samba over SMB/RPC

    Use pth-net with NTLM hash to enumerate users, payloads, groups and shares via SMB/RPC in pentests, compare it with NetExec and Impacket and analyze PtH detection.

    Discover more Discover more
  • impacket-secretsdump: Dump Windows Hashes and Credentials
    tools

    impacket-secretsdump: Dump Windows Hashes and Credentials

    How to impacket-secretsdump: Remote and offline dump of NTLM hashes, SAM, LSA secrets, Kerberos keys, and NTDS.dit in Windows and Active Directory.

    Discover more Discover more
  • NTLM: Protocol, Hash Capture, Pass-the-Hash and Relay on Active Directory
    windows

    NTLM: Protocol, Hash Capture, Pass-the-Hash and Relay on Active Directory

    NTLM explained from top to bottom: handshake, capture, NetNTLMv2 with Responder, Pass-the-Hash, coercion, and CVE 2026 enabled. NTLM vs. Kerberos decision point in the enterprise pentest.

    Discover more Discover more
  • NTLM Information Disclosure: Enumerate Domain, Hostname, and OS Without Credentials
    windows

    NTLM Information Disclosure: Enumerate Domain, Hostname, and OS Without Credentials

    NTLM authentication over HTTP reveals AD domain, NetBIOS name, hostname, and OS version with a single GET, without credentials. This is an essential recon technique for Exchange and IIS red teams. Learn curl, Nmap, Burp, and defenses.

    Discover more Discover more
  • Active Directory Pentesting 2026: Complete Guide to Kerberos, NTLM and Privilege Escalation
    windows

    Active Directory Pentesting 2026: Complete Guide to Kerberos, NTLM and Privilege Escalation

    Active Directory Pentesting operationally explained: AD architecture, Kerberos vs NTLM, BloodHound, Kerberoasting, AS-REP Roasting, NTLM Relay, ACL abuse, AD CS, DCSync, Golden Ticket, Shadow Credentials and real defenses.

    Discover more Discover more
  • Windows Pass-the-Hash: Attack, Operation, and Passwordless Access
    windows

    Windows Pass-the-Hash: Attack, Operation, and Passwordless Access

    Learn Pass-the-Hash (PtH) on Windows: how it works, how to leverage NTLM hashes to gain passwordless access, and real-world lateral movement techniques.

    Discover more Discover more
  • Hashcat: Password Cracking with GPU, Hash, Modes and Rules
    tools

    Hashcat: Password Cracking with GPU, Hash, Modes and Rules

    Hashcat: GPU password cracking practical guide for NTLM, MD5, SHA, bcrypt hashes. Attack modes, mask patterns, wordlist rules and real techniques from CTF and pentest.

    Discover more Discover more