NTLM Relay

A network attack that intercepts and relays NTLM authentication to impersonate a user on another service. NTLM relay exploits weaknesses in Microsoft's NTLM authentication protocol, still widely used in Active Directory environments. This technique is commonly employed during internal penetration tests.