impacket
impacket copied to clipboard
Enhancement Request -- Ntlmrelayx.py: MSSQL relay server
In addition to the current HTTP and SMB relay servers, Ntlmrelayx could support an MSSQL relay server. NTLM authentication from MSSQL is common to see in corporate environments, and it should be possible to relay MSSQL windows-auth to MSSQL, Depending on the implementation of MSSQL NTLM, it may also be possible to relay MSSQL auth to other protocols like SMB or LDAP.
https://twitter.com/agsolino/status/1246752397780803584
+1 for this feature request. I can't find any tooling that supports the relay of incoming MSSQL auth and this would be great to have.