PetitPotam

PetitPotam PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions : The tools use the LSARPC named pipe with inteface c681d488-d850-11d0-8c52-00c04fd90f7e because it's more prevalent. But it's possible to trigger with the EFSRPC named...

ADCSPwn

ADCSPwn A tool to escalate privileges in an active directory network by coercing authenticate from machine accounts Petitpotam and relaying to the certificate service. Usage Run ADCSPwn on your target network. root@kitploit: Author: @batsec - MDSec ActiveBreach Contributor: @Flangvik - TrustedSec...

CVE-2026-18504

A flaw was found in fastify. A remote attacker can bypass schema validation when a request body schema targets a root primitive value. This occurs because the validation process may coerce a JSON string into an expected type, but the original unvalidated string is then passed to the application...

CVE-2026-32202

Aviso Legal Esta ferramenta destina-se exclusivamente a red teaming autorizado e testes de penetração. O uso não autorizado contra sistemas sem permissão explícita é ilegal. Use por sua conta e risco. O autor não assume qualquer responsabilidade por uso indevido ou danos. Descrição Coerção de has...

Ivanti EPM - Credential Coercion Vulnerability in GetHashForSingleFile

A vulnerability in Ivanti Endpoint Manager EPM allows an unauthenticated attacker to coerce the EPM machine account credential via the GetHashForSingleFile endpoint. The vulnerability exists due to improper input validation in the wildcard parameter, allowing an attacker to specify a remote UNC...

Ivanti-EPM-Coercion-Vulnerabilities

Ivanti EPM Coercion Vulnerabilities Proof of concept exploits for Ivanti EPM CVE-2024-13159 and others which allows for unauthenticated coercion of the Ivanti EPM machine credential for use in relay attacks. Blog Post Deep-dive analysis here:...

USBCoercer

Alvos Suportados| ESP32-S3 ---|--- USBCoercer: Um Dispositivo de Coerção WPAD Baseado em TinyUSB USBCoercer transforma uma placa de desenvolvimento ESP32 com USB-OTG nativo em um gadget Ethernet-over-USB capaz de coagir a configuração de proxy via WPAD. Ele se baseia no exemplo TinyUSB Network...

RAITrigger

RAITrigger Die RPC-Funktion RAiForceElevationPromptForCOM aus der Bibliothek appinfo.dll ermöglicht SYSTEM-Zwang. Dies funktioniert nur auf der Domäne beigetretenen Systemen. Es hat sich herausgestellt, dass diese Funktion von jedem Benutzer mit niedrigen Berechtigungen aufgerufen werden kann nic...

EUVD-2026-66760

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

cupntlm-Automated-Exploit-For-CVE-2025-33073-

cupntlm CVE-2025-33073 — Bypass de Reflexão NTLM via Coerção DNS Ferramenta automatizada de exploração para ambientes Active Directory. Visão Geral cupntlm automatiza a cadeia de ataque de reflexão/retransmissão NTLM que abusa da CVE-2025-33073. Ela combina injeção de registros DNS, coerção de...

json-sanitizer

json-sanitizer 给定类似JSON的内容，JSON Sanitizer 会将其转换为有效的JSON。 入门 - 联系方式 它可以附加在数据管道的任一端，以帮助满足Postel原则： 在自己做什么时要保守，在接受别人给予时要开放 应用于来自他人的类似JSON的内容时，它会生成格式良好的JSON，应能满足您使用的任何解析器。 在发送之前应用于您的输出时，它会纠正编码中的小错误，并使您的JSON更易于嵌入HTML和XML。 动机 许多应用程序有大量代码使用临时方法生成JSON输出。...

UnCanny

UNCanny Coerce L'idea alla base di questa ricerca era semplice: volevo trovare una mia tecnica di coercizione. Ho iniziato cercando nuove superfici d'attacco RPC, ma dopo che Microsoft ha aggiunto il monitoraggio delle attività RPC...

relay_bible

Relay Bible — Leitfaden für Relay-Angriffe bei internen Penetrationstests Eine umfassende Referenz für NTLM-Relay-Angriffe bei autorisierten internen Penetrationstests. Behandelt Authentifizierungsgrundlagen, Coercion-Techniken, Relay-Ziele pro Protokoll, Werkzeuge, fortgeschrittenes Chaining und...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2026-65641

CVE-2026-65641 is a Critical (CVSS 9.3) vulnerability in Veeam ONE affecting all version 13 builds from 13.1.0.7034 and earlier (12.x is not affected). An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB (NTLM) authentication , potentially exposing the...

CVE-2026-65641

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

CVE-2025-33073

Obscura$ Injetor de Relay DNS + Ferramenta de Coerção NTLM Uma prova de conceito furtiva que encadeia injeção de DNS, relay NTLM e coerção baseada em RPC para testar caminhos de relay de autenticação em ambientes Windows Active Directory. ⚠️ AVISO: Apenas para testes de segurança autorizados e uso...

SharpSCCM

Panoramica dello Strumento SharpSCCM è uno strumento di post-exploitation progettato per sfruttare Microsoft Endpoint Configuration Manager alias ConfigMgr, precedentemente SCCM per movimento laterale e raccolta di credenziali senza richiedere l'accesso alla GUI della console di amministrazione d...

Coercer

Ein Python-Skript, um einen Windows-Server automatisch zu zwingen, sich auf einer beliebigen Maschine über viele Methoden zu authentifizieren. Windows-Unterstützung Um eine Binärdatei für Windows zu erstellen, laden Sie das Skript installer.ps1 aus diesem Repository herunter. Führen Sie es einfac...