How does cntlm calculate hashes? Is it possible to use NTLM hash to calculate PassNTLMv2? about cntlm HOT 2 OPEN

Have you had any luck with this? I am also interested in NTLMv2 version of this

from cntlm.

Actually for me it seemed that the NTLM hash using SSPI was not exactly an NTLM hash at all, they just probably called it the same for backwards compability or stuff like that. Originally I created the SSPI version to pierce through my corporate firewall too, it was using Negotiate but worked with NTLM just fine too (Negotiate was actually used by the browser as the research showed). It really seems that when the system is going through the SSPI route it doesn't care about what is the "type" it uses.

Anyway, as I wrote in the commit messages, to allow other SSPI handles (called "security support providers" and which you can get through EnumerateSecurityPackages WinAPI function as per msdn) - I need to change the way how the header name is generated, because I just went a kind of "easy way", just patching inside the ntlm_request/ntlm_response functions. Which means NTLM is already predefined at this stage. As I didn't needed it, I just left it as is, but any pull requests would be welcome.

from cntlm.