RelayKing-Depth NTLM релей сканер.

[ADMIN]

GitHub - depthsecurity/RelayKing-Depth: Dominate the domain. Relay to royalty.

Dominate the domain. Relay to royalty. Contribute to depthsecurity/RelayKing-Depth development by creating an account on GitHub.

github.com

NTLM релей сканер. Сканирует по SMB, LDAP/S, MSSQL, HTTP/S, RPC, WinRM. Находит WebDAV WebClient, CVE-2025-33073 (NTLM reflection), NTLMv1 + PrinterBug / PetitPotam и т.п.

Статья:

Introducing RelayKing – Relay To Royalty | Depth Security

If you’re anything like me and/or an offensive security professional, you’re probably very, very familiar with NTLM relaying attacks against Active Directory environments. NTLM relay attacks are anything but novel; pentesters and hackers alike have been forcing blue teams and sysadmins all...

www.depthsecurity.com

 

[Support]

GitHub - depthsecurity/RelayKing-Depth: Dominate the domain. Relay to royalty.

Dominate the domain. Relay to royalty. Contribute to depthsecurity/RelayKing-Depth development by creating an account on GitHub.

github.com

NTLM релей сканер. Сканирует по SMB, LDAP/S, MSSQL, HTTP/S, RPC, WinRM. Находит WebDAV WebClient, CVE-2025-33073 (NTLM reflection), NTLMv1 + PrinterBug / PetitPotam и т.п.

Статья:

Introducing RelayKing – Relay To Royalty | Depth Security

If you’re anything like me and/or an offensive security professional, you’re probably very, very familiar with NTLM relaying attacks against Active Directory environments. NTLM relay attacks are anything but novel; pentesters and hackers alike have been forcing blue teams and sysadmins all...

www.depthsecurity.com

[ RU ]

Основные меры предосторожности (обязательно выполняйте хотя бы часть)
- Не устанавливайте ничего, если не понимаете, что именно делает программа.
- Проверяйте источник - лучше всего официальный сайт автора или GitHub с открытым исходным кодом.
- Используйте виртуальную машину (VirtualBox, VMware) или песочницу (Sandboxie, Windows Sandbox) для теста подозрительного софта.

[ ENG ]

Basic precautions (be sure to follow at least some of them)
- Don't install anything if you don't understand what the program does.
- Check the source—preferably the author's official website or GitHub with open source code.
- Use a virtual machine (VirtualBox, VMware) or sandbox (Sandboxie, Windows Sandbox) to test suspicious software.