mitm6 IPv6 DNS takeover and NTLM relay

mitm6 abuses DHCPv6 on an affected local network to advertise an attacker-controlled IPv6 DNS server. Clients that accept the setting and perform relevant DNS/WPAD or other name-resolution requests may authenticate to the attacker-controlled listener; that NTLM challenge-response can then be relayed to a compatible service. LDAP(S) or SMB effects are conditional on target protections and the relayed identity's permissions. The relay can attempt distinct outcomes such as granting directory-replication rights, configuring RBCD, or exposing an accepted SMB session; capturing an exchange alone grants no privilege and does not provide a reusable NT password hash.