Exfiltrate NTLM Hash

Exfiltrate NTLM Hash
Download Copy
Title: Exfiltrate NTLM Hash
Author: luu176

A payload used to exfiltrate the NTLM hash on a Windows machine.

Exfiltration is an involuntary backup. It's a technique for obtaining data from a network. Once obtained, the data may be removed using a number of methods. These may include traversing the network to a command and control server, such as Cloud C². The content is typically encrypted or obfuscated. In the case of physical access, a bring-your-own-network element may be included to evade detection. See all exfiltration payloads.

This payload is for the USB Rubber Ducky — a "flash drive" that types keystroke injection payloads into unsuspecting computers at incredible speeds. It's no wonder this little quacker has made appearances on Mr. Robot, FBI, Blacklist, National Geography and more!

Submit your own payload, or browse more featured USB Rubber Ducky Payloads.

 

 

Related Payloads

DNS TXT Command Injection
DNS TXT Command Injection
This payload uses Resolve-DnsName to perform a DNS name query resolution for a domain hosting a malicious TXT record
Read More
Duckie Harvest
Duckie Harvest
This payload extracts and saves Wi-Fi passwords and browser credentials from Google Chrome, Brave, Firefox, and Microsof
Read More
WiFi Passwords Exfiltration Via SCP
WiFi Passwords Exfiltration Via SCP
This payload finds WiFi SSIDs and passwords on a Windows machine, saves them to a file, and sends the file to a VPS usin
Read More