
Archived
PwnedPasswordsChecker
Search (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)
data-exfiltrationhash-analysisinformation-gathering+2

Search (offline) if your password (NTLM or SHA1 format) has been leaked (HIBP passwords list v8)

Enumerate information from NTLM authentication enabled web endpoints 🔎

Finding all things on-prem Microsoft for password spraying and enumeration.

Demonstrates capturing NTLM hashes via Responder and executing phishing emails exploiting CVE-2024-21413 to compromise systems.