.. / AD - Dementor - Capture Auth to Relay

dementor.py interacts with the printer spooler on a host to trigger an authentication from the target IP to an attacker controlled host (usually an SMB or HTTP server). This captured authentication can then be relayed to authenticate to other hosts. See more in ntlmrelayx.py.

Command Reference:

Target IP: 10.10.10.1

Attacker IP: 10.10.10.2

Domain: test.local

Username: test

Password: Welkom01!
Command: Copy References:

https://gist.github.com/3xocyte/cfaf8a34f76569a8251bde65fe69dccc

https://www.praetorian.com/blog/active-directory-computer-account-smb-relaying-attack