auth-coercion-relay

What problem does it solve?

This Skill helps penetration testers capture credentials by forcing remote systems to authenticate to attacker-controlled listeners, enabling privilege escalation and lateral movement.

Core Features & Use Cases

• Authentication Coercion: Utilizes various techniques (PetitPotam, PrinterBug, DFSCoerce, etc.) to trigger authentication callbacks.
• NTLM & Kerberos Relay: Relays captured credentials to services like SMB, LDAP, and AD CS for further exploitation.
• Hash Capture: Captures NetNTLM hashes for offline cracking when relay is not feasible.
• Use Case: A tester can use this Skill to force a Domain Controller to authenticate to their listener, capture the NTLM hash, and then relay it to gain administrative access to the DC.

Quick Start

Use the auth-coercion-relay skill to attempt PetitPotam coercion against the target DC at 10.10.10.5.