Coercer
Coerces a host to authenticate to you over multiple RPCs (for relay or roast).
It automates authentication coercion: it forces a host (typically a DC) to authenticate to an IP you control, bulk-testing many vulnerable RPC methods (MS-RPRN, MS-EFSR, MS-FSRVP, MS-DFSNM). That coerced authentication is captured or relayed to take over the domain. It's the all-in-one version of PetitPotam and PrinterBug.
Family NTLM coercion & relay
Flags coerce -t <dc> -l <lhost>
Concepts NTLM Relay, NTLMv2 coercion with SCF/URL (IconFile UNC)
Cheatsheet Coercion & DC CVEs (NoPac, PetitPotam, PrintNightmare)
Installation
pipx install coercerUseful commands
Reference tool: it does not yet appear in a published machine on the blog, but it is part of the arsenal for its everyday use.