I have made a small PowerShell module that can be used to retrieve the NetNTLMv2 hash for the user running this module. This can be valuable if you have RCE as a low-privileged account.

It is similar to Responder, but allow a user to quickly capture its own hash by doing NTLM-authentication against its embedded web-server.

I have uploaded it on GitHub, and it is available here: