Skip to content

Conversation

@gabrielg5
Copy link
Collaborator

This PR implements #1217 (and superseeds #1401)

It basically does:

  • Showing client IP when logging that a connection has been successfully relayed
    • Shows an autoincremental id next to this message (*)
  • Standardized relay server logging prefixes. Now it shows the protocol: HTTP, SMB, RPC, WCF, RAW

(*) This id will be later referenced in an upcoming PR I'll be submitting soon. We'll be prefixing each attack logging with session information, simplifying debugging

…ay server prefixes (protocol). showin an incremental id for session relayed.
@gabrielg5 gabrielg5 changed the title NTLMRelayX: Shown client IP when realying successful NTLMRelayX: Show client IP when realying successful Jul 29, 2025
@anadrianmanrique anadrianmanrique added the medium Medium priority item label Jul 31, 2025
@alexisbalbachan
Copy link
Collaborator

Thank you for the PR, merging it now.

@alexisbalbachan alexisbalbachan merged commit 5769336 into master Aug 28, 2025
10 checks passed
@gabrielg5 gabrielg5 deleted the add_clientip_relay_successful branch September 30, 2025 14:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

medium Medium priority item

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants