Passback Attacks

There's not much to show here - the general idea is that you can change the server for a service to your machine running Responder or netcat and catch the credentials

https://www.mindpointgroup.com/blog/how-to-hack-through-a-pass-back-attack/