Responder

GitHub - lgandx/Responder: Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.GitHub

The Responder tool can be used to exploit LLMNR and NBT-NS to intercept NetNTLM challenge hashes:

NetNTLM | Penetration testing & ethical hacking conceptsjarrettgxz-sec.gitbook.io