PrinterBug (SpoolSample)

SpoolSample.exe <target> <listener>

Forces a Windows host to authenticate against an NTLM server via the print service (MS-RPRN).

When you want to force authentication from a host (e.g., DC) to an NTLM listener. SpoolSample abuses the print service to force the host to connect to an SMB server you control.

If the print service is disabled or the host is not vulnerable (patched). Also if the firewall blocks port 445.