reddit hackernews mail facebook facebook linkedin
Coercer

Coercer

Automatically coerce a Windows server to authenticate on an arbitrary machine.

- Core:
* Lists open SMB pipes on the remote machine
* Tries to connect on a list of known SMB pipes on the remote machine
* Calls one by one all the vulnerable RPC functions to coerce the server to authenticate on an arbitrary machine
* Random UNC paths generation to avoid caching failed attempts
* Configurable delay between attempts
- Options:
* Filter by method name, by protocol name or by pipe name
* Target a single machine or a list of targets from a file
* Specify IP address OR interface to listen on for incoming authentications
- Exporting results
* Export results in SQLite format
* Export results in JSON format
* Export results in XSLX format