coercer

What problem does it solve?

This Skill allows you to force Windows servers to authenticate to a controlled host, enabling NTLM relay or hash capture.

Core Features & Use Cases

• NTLM Authentication Coercion: Abuses RPC protocols (MS-RPRN, MS-EFSR, MS-DFSNM, etc.) to trigger outbound NTLM authentication from a target Windows server.
• Hash Capture & Cracking: Captures Net-NTLMv2 hashes for offline cracking with tools like Hashcat.
• NTLM Relay Attacks: Enables real-time NTLM relay attacks using tools like ntlmrelayx to gain access to other systems.
• Use Case: When asked to capture NTLM authentication from a specific Windows server or to set up an NTLM relay attack.

Quick Start

Use the coercer skill to coerce NTLM authentication from the target server 10.10.10.10 to your listener IP 10.10.14.1 using the provided credentials.