domains / families / security / ntlm-relay-coercion

ntlm-relay-coercion

separate

NTLM relay and authentication coercion playbook. Use when capturing and relaying NTLM authentication to escalate privileges via SMB, LDAP, HTTP, or MSSQL relay targets, combined with PetitPotam, PrinterBug, and other coercion methods.

When to use

• NTLM relay to SMB
• NTLM relay to LDAP
• NTLM relay to HTTP
• NTLM relay to MSSQL
• PetitPotam coercion
• PrinterBug coercion
• Responder poisoning
• mitm6 IPv6 DNS takeover

Skill page

Source