# SMB Response Request

* Network traffic of the SMB handshake is needed
* Fields are
    * username
    * domain
    * server challenge
    * ntproofstring
    * NTLMv2Response with ommited hex of type like 'ntlmProofStr' at the start

## Usage 

* Format the fields
```sh
username::domain:serverChallenge:ntproofstring:NTLMv2Response
```

* Use john to decrypt