NTLM Relay — NTLM relay forwards a captured or induced NTLM authentication exchange to another service. The attacker exploits insufficient protections around the exchange’s destination and context. Successful relay provides access without requiring recovery of the original password. – Authentication Attacks

Added October 7, 2026