RelayKing
RelayKing helps you relay all the things. Great blog post about it here.
Install
Right from GitHub readme:
# Use a venv. Save yourself the hassle.
# Clone repo:
git clone https://github.com/depthsecurity/RelayKing-Depth.git ~/RelayKing-Depth
#Navigate to cloned dir:
cd RelayKing-Depth/
# Configure Python venv:
virtualenv --python=python3 .
source bin/activate
# Install deps:
pip3 install -r requirements.txt
# Validate RelayKing installation was successful:
python3 relayking.py -hQuick audit
python3 relayking.py -u 'lowpriv' -p 'pass' -d domain.local --dc-ip 1.2.3.4 -vv --audit --protocols smb,ldap,ldaps,mssql,http,https --threads 10 -o plaintext,json --output-file relayking-scan --proto-portscan --ntlmv1 --gen-relay-list relaytargets.txt