GSS-NTLMSSP
GSS-NTLMSSP is a GSSAPI mechanism plugin that implements the NTLMSSP protocol for NTLM and NTLMv2 challenge-response authentication. It provides a loadable module compatible with MIT Kerberos GSSAPI.
Description
GSS-NTLMSSP implements the NTLMSSP mechanism as a GSSAPI plugin, supporting both NTLM and NTLMv2 along with various Microsoft security variants for key exchange. This plugin enables applications using MIT GSSAPI to authenticate via Microsoft's NTLM challenge-response family of protocols.
The tool is particularly useful in environments requiring interoperability between GSSAPI-based systems and Windows NTLM authentication. It has been tested with MIT Kerberos 1.11 and supplies the necessary plugin for runtime use, as well as development headers for building custom applications.
As a Kali Linux package, it supports cybersecurity tasks involving protocol emulation, authentication testing, and integration with Kerberos infrastructures.
How It Works
GSS-NTLMSSP operates as a loadable GSSAPI mechanism plugin for MIT Kerberos implementations. It handles the NTLMSSP protocol, which encompasses NTLM and NTLMv2 challenge-response mechanisms, including all documented Microsoft key exchange variants. The plugin integrates directly into GSSAPI contexts, allowing seamless authentication negotiation without modifying core Kerberos code.
Installation
sudo apt install gss-ntlmsspExamples
sudo apt install gss-ntlmsspsudo apt install gss-ntlmssp-devapt show gss-ntlmsspdpkg -L gss-ntlmsspdpkg -L gss-ntlmssp-devldd /path/to/gssapi-app