Relay an incoming NTLM authentication exchange to an SMB server that does not require SMB message signing. The client must send authentication to the relay listener, and the target must not require signing; successful access is limited to the relayed identity's permissions. Lack of SMB encryption alone does not enable this relay.
Requirements: none specified (operational prerequisites may still apply)
Check before starting: RESTRICTED_ACCESS_BLUR_MARKER
Variant:
Full outcome coverage
FindUncommonShares.py · Enumerate SMB share metadata on an explicit host
Enumerate SMB share metadata on an explicit host
powershell
RESTRICTED_ACCESS_BLUR_MARKER
Version: RESTRICTED_ACCESS_BLUR_MARKER. Requirements: ALL(RESTRICTED_ACCESS_BLUR_MARKER)Documents all requested outcomes. This is a candidate, not proof of execution or compatibility.preconditions: RESTRICTED_ACCESS_BLUR_MARKERdependencies: RESTRICTED_ACCESS_BLUR_MARKERverification: RESTRICTED_ACCESS_BLUR_MARKERfailure modes: RESTRICTED_ACCESS_BLUR_MARKERlimitations: RESTRICTED_ACCESS_BLUR_MARKER