Skip to content

Ntlm reflection exploit#1044

Open
overgrowncarrot1 wants to merge 18 commits intoPennyw0rth:mainfrom
overgrowncarrot1:ntlm_reflection_exploit
Open

Ntlm reflection exploit#1044
overgrowncarrot1 wants to merge 18 commits intoPennyw0rth:mainfrom
overgrowncarrot1:ntlm_reflection_exploit

Conversation

@overgrowncarrot1
Copy link

Description

Please include a summary of the change and which issue is fixed, or what the enhancement does.
List any dependencies that are required for this change.

Type of change

Insert an "x" inside the brackets for relevant items (do not delete options)

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Deprecation of feature or functionality
  • This change requires a documentation update
  • This requires a third party update (such as Impacket, Dploot, lsassy, etc)

Setup guide for the review

If testing on GOAD change the server you are going against that has ldap or ldaps to have SMB Signing false

Screenshots (if appropriate):

image image image image image image

Checklist:

Insert an "x" inside the brackets for completed and relevant items (do not delete options)

  • I have ran Ruff against my changes (via poetry: poetry run python -m ruff check . --preview, use --fix to automatically fix what it can)
  • I have added or updated the tests/e2e_commands.txt file if necessary (new modules or features are required to be added to the e2e tests)
  • New and existing e2e tests pass locally with my changes
  • If reliant on changes of third party dependencies, such as Impacket, dploot, lsassy, etc, I have linked the relevant PRs in those projects
  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation (PR here: https://github.com/Pennyw0rth/NetExec-Wiki)

overgrowncarrot1 and others added 16 commits August 19, 2025 06:58
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: overgrowncarrot1 <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
This module allows for adding, listing, or cleaning up ADIDNS A records for NTLM reflection and relay. It includes options for specifying DNS records, IP addresses, and modes of operation.

Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
Removed unused imports and commented-out code related to DNS structures.

Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
Signed-off-by: Ryan Yager <78485709+overgrowncarrot1@users.noreply.github.com>
@lodos2005
Copy link
Contributor

I think this is a better alternative. #761

@overgrowncarrot1
Copy link
Author

Me too lol

I think this is a better alternative. #761

@NeffIsBack
Copy link
Member

I think this is a better alternative. #761

Yep. Thanks for the PR, but it is duplicate to #761 and the coerce_plus module

@NeffIsBack NeffIsBack added the duplicate This issue or pull request already exists label Dec 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

duplicate This issue or pull request already exists

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants