This module can be used to extract information using the NTLMSSP challenge provided during NTLM authentication.
This module can retrieve NTLMSSP information from HTTP, SMB, SMTP, and RDP servers.
You can find an implementation of this module here: ntlmInfoGrabber
Much of the information used to create this software came from this excellent in depth page on the NTLMSSP protocol.