Module to check for NTLMv1 Compatibility

[Tw1sm]

Added a small module to query the target's LmCompatibilityLevel to determine if the target allows NTLMv1 auth.

Example:

This check queries the registry which requires admin privileges - makes it more ideal for auditing systems that still allow NTLMv1 than locating boxes you can laterally move to (unfortunately)

[SAERXCIT]

Great idea ! However from what I understand NTLMv1 is also enabled if LmCompatibilityLevel is set to 2.

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level

[Tw1sm]

Great idea ! However from what I understand NTLMv1 is also enabled if LmCompatibilityLevel is set to 2.

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level

Great catch, modified to include level 2

[mpgn]

thanks for the module :) Tested in my lab, all good for me I will merge it probably next week. thanks @SAERXCIT for the review !

[0xAsh]

This is so cool and something I've been wanting for a looong time but never tried to implement myself. Thank you @Tw1sm !