APT: “ETWHash ETWHash is a C# POC that is able to extract NetNTLMv2 hashes o…” · TGViewer

TGViewer Telegram Channel Viewer

APT @apt_notes · 16.7K subscribers

Post #900 2.26K May 3, 2023, 15:03 UTC

Forwarded from 1N73LL1G3NC3

ETWHash

ETWHash is a C# POC that is able to extract NetNTLMv2 hashes of incoming authentications via SMB, by consuming ETW events from the Microsoft-Windows-SMBServer provider {D48CE617-33A2-4BC3-A5C7-11AA4F29619E}

https://labs.nettitude.com/blog/etwhash-he-who-listens-shall-receive/

🔥 5
👍 1

Open in Telegram All posts from @apt_notes

More from @apt_notes

Sep 1, 2026🔒 Certi-Bhai — IIS AppPool → NT AUTHORITY\SYSTEM via AD CS RPC A webshell under IIS AppPo…
Aug 17, 2026🔒 Citrix NetScaler Pre-Auth RCE (CVE-2026-8452) Unauthenticated heap overflow in SAML sig…
Aug 11, 2026Post #1201
Aug 7, 2026ResetNightmare ResetNightmare (CVE-2026-27912) is a validation flaw in the Kerberos Change…
Jul 24, 2026🔒 Certighost (CVE-2026-54121) — AD CS Domain Controller Impersonation Low-privileged doma…
Jul 9, 2026💉 P³ — Shellcode Loader: Process Parameter Poisoning This loader implements a code inject…

Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →