Hooks for intercepting SpAcceptLsaModeContext to print any incoming authentication attempts to Beacon. The hook is installed on the Lsass heap to make it easy, rather than hooking the DLL image directly.
Written by Austin Hudson
forked from SolomonSklash/netntlm
-
Notifications
You must be signed in to change notification settings - Fork 0
cisp-pte/netntlm
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published
Languages
- C 90.4%
- Makefile 3.6%
- Assembly 3.1%
- Python 2.9%