Skip to content

NTLMRelayX: Show client IP when realying successful #2012

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

gabrielg5
Copy link
Collaborator

This PR implements #1217 (and superseeds #1401)

It basically does:

  • Showing client IP when logging that a connection has been successfully relayed
    • Shows an autoincremental id next to this message (*)
  • Standardized relay server logging prefixes. Now it shows the protocol: HTTP, SMB, RPC, WCF, RAW

(*) This id will be later referenced in an upcoming PR I'll be submitting soon. We'll be prefixing each attack logging with session information, simplifying debugging

…ay server prefixes (protocol). showin an incremental id for session relayed.
@gabrielg5 gabrielg5 changed the title NTLMRelayX: Shown client IP when realying successful NTLMRelayX: Show client IP when realying successful Jul 29, 2025
@anadrianmanrique anadrianmanrique added the medium Medium priority item label Jul 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
medium Medium priority item
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants