diff --git a/packages/ntlm_theft/PKGBUILD b/packages/ntlm_theft/PKGBUILD
new file mode 100644
index 00000000000..e629300b5b5
--- /dev/null
+++ b/packages/ntlm_theft/PKGBUILD
@@ -0,0 +1,42 @@
+# This file is part of BlackArch Linux ( https://www.blackarch.org/ ).
+# See COPYING for license details.
+
+pkgname=ntlm_theft
+pkgver=20.81589ea
+pkgrel=1
+pkgdesc='Generate multiple types of NTLMv2 hash theft files.'
+arch=('any')
+groups=('blackarch' 'blackarch-networking')
+url='https://github.com/Greenwolf/ntlm_theft'
+license=('GPL3')
+depends=('python' 'python-xlsxwriter')
+makedepends=('git')
+source=("git+https://github.com/Greenwolf/$pkgname.git")
+sha512sums=('SKIP')
+
+pkgver() {
+  cd $pkgname
+
+  echo $(git rev-list --count HEAD).$(git rev-parse --short HEAD)
+}
+
+package() {
+  cd $pkgname
+
+  install -dm 755 "$pkgdir/usr/bin"
+  install -dm 755 "$pkgdir/usr/share/$pkgname"
+  install -Dm 644 -t "$pkgdir/usr/share/doc/$pkgname/" *.md
+
+  rm -rf LICENSE *.md docs/* .gitignore
+
+  cp -a * "$pkgdir/usr/share/$pkgname/"
+
+  cat > "$pkgdir/usr/bin/$pkgname" << EOF
+#!/bin/sh
+cd /usr/share/$pkgname/
+exec python /usr/share/$pkgname/$pkgname.py "\$@"
+EOF
+
+  chmod a+x "$pkgdir/usr/bin/$pkgname"
+}
+