This module performs the SMB Relay attacks originally discovered by cDc extended to many target protocols (SMB, MSSQL, LDAP, etc). It receives a list of targets and for every connection received it will choose the next target and try to relay the credentials. Also, if specified, it will first to try authenticate against the client connecting to us. Add a computer account to the domain (use ldap:// for insecure ldap) (SMB signing must be disabled).
Command Reference:
Target: ldaps://<dc-ip>
ntlmrelayx.py -t ldaps://<dc-ip> --add-computer