SolomonSklash / netntlm

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

About

Hooks for intercepting SpAcceptLsaModeContext to print any incoming authentication attempts to Beacon. The hook is installed on the Lsass heap to make it easy, rather than hooking the DLL image directly.

Author

Written by Austin Hudson

About

A crappy hook on SpAcceptLsaModeContext that prints incoming auth attempts. WIP


Languages

Language:C 90.4%Language:Makefile 3.6%Language:Assembly 3.1%Language:Python 2.9%