Got SAM? Don't want to spend more time cracking it?
SMBProxy is a "Passing the Hash" tool that works as a proxy. It makes it possible to authenticate against a Windows NT4/2000server by only knowing the md4 hash. It also makes it possible to mount shares, access the registry, and anything else you could do with those particular user's privileges. The theory behind this is old, and well known. The tools for doing this though, have been quite limited until now.
The tool intercepts communication with Windows NT 4.0 and Windows 2000. It looks for the username trying to connect and does a lookup in the pwdump file for the users hash. Currently it only intercepts the NTLM hash.
The SMBProxy is still in early development stages but seems to work well enough for release.
