TokenToSeaSkills Hub
中文 Console

Relaying Ntlm For Adcs Esc8

Mahipal

Uses Impacket's ntlmrelayx.py with a coercion tool (PetitPotam, Coercer, printerbug) to relay NTLM authentication from a coerced domain controller into the AD CS HTTP web-enrollment endpoint (ESC8), obtaining a DC certificate usable via Certipy for PKINIT/DCSync.

Install

npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill relaying-ntlm-for-adcs-esc8