source
linWinPwn

Swiss-Army knife for Active Directory Pentesting using Linux.

NTLM_challenger

Fetch and parse NTLM challenge messages from HTTP and SMB services.

NTLMRecon

A fast and flexible NTLM reconnaissance tool without external dependencies. Useful to find out information about NTLM endpoints when working with a large set of potential IP addresses and domains.

Ntlmscan

scan for NTLM directories.