NTLM Company Proxy

[test-acc-lololol]

Hey,
I have a question when using the implant through a company proxy.
For my case the proxy requires NTLMv2 authentication via username and password.

I am not sure if there is a way to add credentials for the proxy authentication during implant generation, or does it work out of the box by using the default settings for the proxy?

[ttpreport]

It's not supported at the moment, since the agent binary does not use WinAPI, so it doesn't automatically pick up SSPI and it has to be explicitly implemented. It does pick up HTTP(S) configuration automatically, but not NTLM auth flow.

It's a good feature for the next minor release, I will add it to the backlog.

[test-acc-lololol]

Thank you, I made it working by adding this to the agent generation.

Unfortunately I have to hardcode the credentials, but for now it works.