ghostsurf NTLM HTTP relay tool with SOCKS proxy for browser session hijacking. Capture NTLM auth, relay to HTTP/HTTPS targets, then browse as the victim through a SOCKS proxy. This works even when cookie replay … Continue reading Ghost in the Browser: Hijacking Authenticated Sessions via NTLM Relay with ghostsurf