Skip to content

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP

Notifications You must be signed in to change notification settings

cisp-pte/netntlm

 
 

Repository files navigation

About

Hooks for intercepting SpAcceptLsaModeContext to print any incoming authentication attempts to Beacon. The hook is installed on the Lsass heap to make it easy, rather than hooking the DLL image directly.

Author

Written by Austin Hudson

About

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 90.4%
  • Makefile 3.6%
  • Assembly 3.1%
  • Python 2.9%