Site versions
Large font • contrasting colors • no pictures
NTLM (NT LAN Manager) is a suite of Microsoft security protocols. When a client authenticates to a server, they exchange messages known as Type 1 (Negotiate), Type 2 (Challenge), and Type 3 (Authenticate).
# Create an NTLM object ntlm = NTLM()
Network tools can parse this binary structure automatically. ntlm decode
Attackers use tools like or John the Ripper . They feed the tool the hash and a wordlist (like rockyou.txt ). The tool iterates through the list, hashing each word, until it finds a match. NTLM (NT LAN Manager) is a suite of
The server sends back a 16-byte random number (a nonce). Type 2 (Challenge)