Merge pull request Pennyw0rth#694 from cyberG33k02/false-negative-fix

fix(ntlm): include server hostname in Workstation field of Authentication

Author: NeffIsBack

nxc/protocols/winrm.py

@@ -145,6 +145,9 @@ def check_if_admin(self):
         return True
 
     def plaintext_login(self, domain, username, password):
+        # Add server hostname to the Workstation field in NTLM Authenticate Message (Message 3)
+        # This helps fix false negatives during NTLM auth — see issue #694 for details
+        os.environ["NETBIOS_COMPUTER_NAME"] = self.hostname
         self.admin_privs = False
         self.password = password
         self.username = username
@@ -183,6 +186,9 @@ def plaintext_login(self, domain, username, password):
             return False
 
     def hash_login(self, domain, username, ntlm_hash):
+        # Add server hostname to the Workstation field in NTLM Authenticate Message (Message 3)
+        # This helps fix false negatives during NTLM auth — see issue #694 for details
+        os.environ["NETBIOS_COMPUTER_NAME"] = self.hostname
         self.admin_privs = False
         lmhash = "00000000000000000000000000000000"
         nthash = ""