Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/akashrpatil/awesome-offensive-security-skillsnpx agentmods add skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypassWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypass)<a href="https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypass"><img src="https://agentmods.dev/badge/skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypass/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypass"><img src="https://agentmods.dev/badge/skills/akashrpatil/awesome-offensive-security-skills/ntlm-relay-smb-signing-bypass.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00124 | $0.02630 |
| Opus 5 | $0.00062 | $0.01315 |
| Sonnet 5 | $0.00025 | $0.00526 |
| Haiku 4.5 | $0.00012 | $0.00263 |
Grade B, and why
ntlm-relay-smb-signing-bypass scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
sudo responder -I eth0 -rwdPv How it starts
The opening of the file, as written. The whole thing — 176 lines — stays where its author put it; the contents beside it link to each section on GitHub.
NTLM Relay & SMB Signing Bypass Architecture
When to Use
- When conducting an internal Active Directory network assessment systematically discovering uniquely that while Domain Controllers demand aggressive cryptographic 'SMB Signing', standard user workstations (
Windows 10) and tertiary file servers (Windows Server 2019) seamlessly possessSMB Signing Enabled: Trueintrinsically but natively featureSMB Signing Required: False. - Rather than merely capturing an authentication hash intrinsically attempting to computationally crack it using Hashcat implicitly (which fails instantly against complex 15-character passwords), systematically relay the identical captured session cryptographically to a secondary target natively achieving comprehensive Remote Code Execution (RCE) instantly without cracking entirely.
Prerequisites
- Authorized scope and rules of engagement for the target environment
- Appropriate tools installed on the attack/analysis platform
- Understanding of the target technology stack and architecture
- Documentation template ready for findings and evidence capture
Workflow
Phase 1: Validating the SMB Signing Vulnerability (The Pre-Requisite)
# Concept: NTLM Relaying fundamentally fails against ANY target identically demanding
# `Message Authentication Codes (MAC)` explicitly validating the exact sender inherently
# (SMB Signing Required). By absolute Microsoft default flawlessly, Domain Controllers REQUIRE
# signing fundamentally. Workstations identically DO NOT. We must map the exact un-signed targets.
# 1. Utilize Netexec (or CrackMapExec) systematically scanning the entire Class C /24 subnet natively.
nxc smb 10.0.0.0/24 --gen-relay-list targets.txt
# 2. Analyze the Output unequivocally:
# [SMB] 10.0.0.5 (DC-01) [+] SMB Signing is TRUE. Required is TRUE. (IMMUNE TO RELAY!)
# [SMB] 10.0.0.12 (FILESV) [+] SMB Signing is TRUE. Required is FALSE. (VULNERABLE TARGET!)
# [SMB] 10.0.0.55 (WIN10) [+] SMB Signing is TRUE. Required is FALSE. (VULNERABLE TARGET!)
# 3. The `targets.txt` unequivocally compiles an exhaustive list exclusively isolating
# targets vulnerable implicitly.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 176 lines · 124 tokens per session scan B 74bc40bbbb69
ntlm-relay-smb-signing-bypass is a skill published in the GitHub repository akashrpatil/awesome-offensive-security-skills (5 stars, last pushed 4mo ago), licensed Apache-2.0. It adds 124 tokens to every session and 2,630 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
conducting-internal-network-penetration-test
Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.
hunting-for-ntlm-relay-attacks
Use when detect NTLM relay attacks by analyzing Windows Event 4624 logon type 3 with NTLMSSP authentication, identifying IP-to-hostname mismatches, Responder traffic signatures, SMB signing status, and suspicious authentication patterns across the domain. Use when detecting ntlm relay attacks by analyzing windows…
ipv6-dns-takeover-mitm
Execute an IPv6 DNS Spoofing attack using mitm6 on an IPv4-only corporate network. Exploit default Windows behavior (preferring IPv6 DHCP/DNS) to intercept NTLMv2 hashes, force WPAD rogue proxy settings, and relay credentials to Active Directory services.
conducting-internal-network-penetration-test
Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.
conducting-internal-network-penetration-test
Execute an internal network penetration test simulating an insider threat or post-breach attacker to identify lateral movement paths, privilege escalation vectors, and sensitive data exposure within the corporate network.
ad-pass-the-hash
Exploit Active Directory environments using Pass-the-Hash (PtH). This skill details how to authenticate to remote systems using the NTLM hash of a user's password instead of the plaintext password, enabling lateral movement and privilege escalation without cracking hashes.