Linux command
impacket-dumpntlminfo 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
Dump NTLM info
impacket-dumpntlminfo [192.168.1.100]
Dump NTLM info
impacket-dumpntlminfo -port [139] [192.168.1.100]
Dump NTLM info
impacket-dumpntlminfo -protocol RPC [192.168.1.100]
Dump NTLM info
impacket-dumpntlminfo -target-ip [192.168.1.100] [hostname]
Enable debug output
impacket-dumpntlminfo -debug [192.168.1.100]
说明
impacket-dumpntlminfo performs NTLM authentication against a remote host and extracts information from the NTLM challenge response, without requiring any credentials. By initiating an SMB or RPC connection, the tool triggers an NTLM authentication handshake and parses the server's response to reveal details such as the hostname, domain name, DNS information, OS version, and timestamp. This is useful for reconnaissance during penetration testing, as it provides network and host information without authentication.
参数
- -debug
- Turn DEBUG output on.
- -ts
- Add timestamp to every logging output.
- -target-ip _IP_
- IP address of the target machine. Useful when target is a NetBIOS name that cannot be resolved.
- -port _PORT_
- Destination port to connect to the SMB/RPC server. Default is 445.
- -protocol {SMB, RPC}
- Protocol to use. Default is SMB. Port 135 normally uses RPC.
FAQ
What is the impacket-dumpntlminfo command used for?
impacket-dumpntlminfo performs NTLM authentication against a remote host and extracts information from the NTLM challenge response, without requiring any credentials. By initiating an SMB or RPC connection, the tool triggers an NTLM authentication handshake and parses the server's response to reveal details such as the hostname, domain name, DNS information, OS version, and timestamp. This is useful for reconnaissance during penetration testing, as it provides network and host information without authentication.
How do I run a basic impacket-dumpntlminfo example?
Run `impacket-dumpntlminfo [192.168.1.100]` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does -debug do in impacket-dumpntlminfo?
Turn DEBUG output on.