Making SMB Accessible with NTLMquic

This technical write-up demonstrates SMB over QUIC (SMB mapped to TLS/ALPN on UDP/443), including golang and msquic proof-of-concepts that terminate QUIC and relay SMB traffic to legacy tooling (e.g., ntlmrelayx). The author shows how this transport can be used over the Internet with valid certificates, how it may bypass TCP/445 filtering, and how RPC coercion (PetitPotam/AddUsersToFile) can trigger SMB-over-QUIC authentication attempts, highlighting attacker-relevant implications for credential relay and lateral access.