Cybersecurity

Hunt NTLM Info

Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.

Publisher / source

elementalsouls/Claude-BugHunter (found on GitHub top repositories)

Upstream record

elementalsouls/Claude-BugHunter

Version

Version 1

Published

2026-11-05

Publication review

Approved for publication · recorded passed scan 2026-11-05

Content fingerprint

2ebe0e8acfc301a4986ac508cc5e032727e01f0246dff1df8b2073dcae2ea86f