NTLM Relay with SOCKS Proxy

Use Impacket's NTLM relay SOCKS support to access a compatible, in-scope target service through an already received NTLM authentication. A session is usable only when the requested target service matches an active relay and accepts that relayed authentication. Protections are protocol-specific: SMB signing blocks applicable SMB relay; AD DS LDAP signing rejects unsigned SASL binds, and LDAP channel binding protects supported NTLM binds over TLS. This workflow does not itself obtain client authentication, recover an NTLM hash, or grant privileges beyond those of the relayed identity.