Wh04m1001/DFSCoerce

DFSCoerce

PoC for MS-DFSNM coerce authentication using NetrDfsRemoveStdRoot and NetrDfsAddStdRoot (found by @xct_de) methods.

Documentation: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dfsnm/95a506a8-cae6-4c42-b19d-9c1ed1223979

Inspired by:

PetitPotam (@topotam77)

• https://github.com/topotam/PetitPotam

ShadowCoerce (@topotam77 and @_nwodtuhs)

• https://github.com/ShutdownRepo/ShadowCoerce

SpoolSample (@tifkin_)

• https://github.com/leechristensen/SpoolSample