I am writing a program in Python using the requests-ntlm library. That library adds support for NTLM in regular requests:
import requests from requests_ntlm import HttpNtlmAuth requests.get("http://ntlm_protected_site.com",auth=HttpNtlmAuth('domain\\username','password'))
I intend to make many requests, but I don't know which ones need NTLM. Is it secure to try an NTLM handshake with any server? Is a malicious server able to get a secret?