Auth Coercion Relay
Auth Coercion Relay guides penetration testers through forcing authentication from remote systems via coercion techniques like PetitPotam and PrinterBug, then relaying those credentials through NTLM or Kerberos to escalate privileges or move laterally. It covers relay targets (SMB, LDAP, AD CS), feasibility checks, and both credential capture and exploitation paths.
Auth Coercion Relay forces remote systems to authenticate to attacker listeners and relays captured credentials for privilege escalation.
AI-generated summary based on this skill's SKILL.md
Install
blacklanternsecurity/red-run/auth-coercion-relay · repository language: Python
git clone https://github.com/blacklanternsecurity/red-run
cp -r red-run ~/.claude/skills/auth-coercion-relaygenerated, unverified - the skill's exact subdirectory could not be determined; check the repository on GitHub
npx skillfed install blacklanternsecurity/red-run/auth-coercion-relayFrequently asked questions
AI-generated answers based on this skill's SKILL.md and metadata
What is Auth Coercion Relay and what does it do?
Auth Coercion Relay guides penetration testers through forcing authentication from remote systems via coercion techniques like PetitPotam and PrinterBug, then relaying those credentials through NTLM or Kerberos to escalate privileges or move laterally. It covers relay targets (SMB, LDAP, AD CS), feasibility checks, and both credential capture and exploitation paths.
How does auth coercion relay work in penetration testing?
Auth Coercion Relay works by first coercing a remote system to authenticate using techniques like PetitPotam or PrinterBug, capturing those authentication credentials, and then relaying them through NTLM or Kerberos protocols to targets such as SMB, LDAP, or AD CS. This allows testers to escalate privileges or move laterally without cracking passwords.
What relay targets does Auth Coercion Relay support?
Auth Coercion Relay supports multiple relay targets including SMB (Server Message Block), LDAP (Lightweight Directory Access Protocol), and AD CS (Active Directory Certificate Services). Each target presents different exploitation opportunities depending on the environment and the tester's objectives.
Can Auth Coercion Relay test authentication security?
Yes, Auth Coercion Relay includes capabilities to test authentication security by simulating coerced auth scenarios. Testers can use it to identify vulnerabilities in how systems handle forced authentication and relay attacks, helping organizations strengthen their defenses against these attack vectors.
What coercion techniques does Auth Coercion Relay employ?
Auth Coercion Relay employs coercion techniques such as PetitPotam and PrinterBug to force remote systems into authenticating. These techniques exploit legitimate system functions to trigger authentication attempts that can then be captured and relayed for lateral movement or privilege escalation.
Under what license is Auth Coercion Relay distributed?
Auth Coercion Relay is distributed under the GPL-3.0 license, which permits use, modification, and distribution while requiring that derivative works also be licensed under GPL-3.0.