Home / Authentication / DFSCoerce / NetrDfsRemoveStdRoot / DFSCoerce - PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method

DFSCoerce - PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method

| Post sponsored by FaradaySEC | Multiuser Pentest Environment


PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot method (and probably more but am lazy and its just PoC :P ).

Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dfsnm/95a506a8-cae6-4c42-b19d-9c1ed1223979


Inspired by:

PetitPotam (@topotam77)

ShadowCoerce (@topotam77 and @_nwodtuhs)

SpoolSample (@tifkin_)




DFSCoerce - PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method DFSCoerce - PoC For MS-DFSNM Coerce Authentication Using NetrDfsRemoveStdRoot Method Reviewed by Zion3R on 5:30 PM Rating: 5