{"slug":"elementalsouls-hunt-ntlm-info","source_name":"elementalsouls/hunt-ntlm-info","name":"Elementalsouls/Hunt Ntlm Info","description":"Hunt NTLM/Negotiate information disclosure on internet-reachable IIS/SharePoint/Exchange. Anonymous NTLM Type-2 challenge capture leaks NetBIOS domain, internal DNS forest, computer name, AD timestamp via AV_PAIRS structure. Default Windows-installer hostnames (WIN-XXXXXXXXXXX pattern) signal lazy provisioning. Use when target advertises `WWW-Authenticate: NTLM` or `Negotiate` headers anonymously.","version":1,"lift":{"pass_rate_delta_pts":26.09,"pass_rate_pct":82.6,"total_cases":23,"passed_cases":19,"tokens_delta_pct":243,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-09T13:33:22.441587+00:00"},"skill_score":0.8261,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":26.09,"with_pass_pct":82.6,"without_pass_pct":56.5,"tokens_delta_pct":243,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-09T13:33:22.441587+00:00","run_id":"12cb3f5d-9225-4a70-af9b-1c857c82d8ff","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"NOASSERTION","install_count":0,"manifest_hash":"178fde1d0e62b85c0c36a7773e680f364457d738b8ad339d418f561848e26b51","raw_url":"https://app.decimal.ai/s/elementalsouls-hunt-ntlm-info/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/elementalsouls-hunt-ntlm-info"}