4.2.4.3 Messages
The CHALLENGE_MESSAGE (section 2.2.1.2):
-
0000000: 4e 54 4c 4d 53 53 50 00 02 00 00 00 0c 00 0c 00 NTLMSSP••••••••• 0000010: 38 00 00 00 33 82 8a e2 01 23 45 67 89 ab cd ef 8•••3...•#Eg..═. 0000020: 00 00 00 00 00 00 00 00 24 00 24 00 44 00 00 00 ••••••••$•$•D••• 0000030: 06 00 70 17 00 00 00 0f 53 00 65 00 72 00 76 00 ••p•••••S•e•r•v• 0000040: 65 00 72 00 02 00 0c 00 44 00 6f 00 6d 00 61 00 e•r•••••D•o•m•a• 0000050: 69 00 6e 00 01 00 0c 00 53 00 65 00 72 00 76 00 i•n•••••S•e•r•v• 0000060: 65 00 72 00 00 00 00 00 e•r•••••
The AUTHENTICATE_MESSAGE (section 2.2.1.3):
-
0000000: 4e 54 4c 4d 53 53 50 00 03 00 00 00 18 00 18 00 NTLMSSP········· 0000010: 6c 00 00 00 54 00 54 00 84 00 00 00 0c 00 0c 00 l···T·T·ä······· 0000020: 48 00 00 00 08 00 08 00 54 00 00 00 10 00 10 00 H·······T······· 0000030: 5c 00 00 00 10 00 10 00 d8 00 00 00 35 82 88 e2 \·······.···5... 0000040: 05 01 28 0a 00 00 00 0f 44 00 6f 00 6d 00 61 00 ··(·····D·o·m·a· 0000050: 69 00 6e 00 55 00 73 00 65 00 72 00 43 00 4f 00 i·n·U·s·e·r·C·O· 0000060: 4d 00 50 00 55 00 54 00 45 00 52 00 86 c3 50 97 M·P·U·T·E·R·..P. 0000070: ac 9c ec 10 25 54 76 4a 57 cc cc 19 aa aa aa aa ...·%TvJW..·.... 0000080: aa aa aa aa 68 cd 0a b8 51 e5 1c 96 aa bc 92 7b ....h═·.Q.·....{ 0000090: eb ef 6a 1c 01 01 00 00 00 00 00 00 00 00 00 00 δ∩j············· 00000A0: 00 00 00 00 aa aa aa aa aa aa aa aa 00 00 00 00 ····¬¬¬¬¬¬¬¬···· 00000B0: 02 00 0c 00 44 00 6f 00 6d 00 61 00 69 00 6e 00 ····D·o·m·a·i·n· 00000C0: 01 00 0c 00 53 00 65 00 72 00 76 00 65 00 72 00 ····S·e·r·v·e·r· 00000D0: 00 00 00 00 00 00 00 00 c5 da d2 54 4f c9 79 90 ········...TO.y. 00000E0: 94 ce 1c e9 0b c9 d0 3e ..·..·..>