Alex

Results 138 comments of Alex

Printerbug&PetitPotam are now working in my Lab. Will test the others soon

Somehow DFSCoerce does work only without the `RPC_C_AUTHN_LEVEL_PKT_PRIVACY` flag. Also added `ERROR_BAD_NETPATH` to the "success" error message, because this what i get for successful coercion. Working consistent now: ![image](https://github.com/user-attachments/assets/b791a860-f8a3-437c-8535-f137940ecd1b) ![image](https://github.com/user-attachments/assets/8037a773-8fb0-4c90-bf45-648194c4349f)

Only ShadowCoerce & MSEven missing now :) then we are good to go

Looks like ShadowCoerce has been patched: https://www.bleepingcomputer.com/news/microsoft/microsoft-quietly-fixes-shadowcoerce-windows-ntlm-relay-bug/ At least even with the original tool i don't get any authentications, although everything looks like it should be working. I will leave...

> For the other modules (the deleted ones) I think they shouldn't be deleted since it will break previous tutorial, demo, course on nxc. It can be also useful if...

Actually, MSEven worked totally fine, not sure what the problem was the last time i tried: ![image](https://github.com/user-attachments/assets/aa07a55f-3f37-48be-bb10-e171df31bc28) Added 2 more error codes to the code that triggered the coercion

Can't test wmi on my notebook as it is not domain joined, but the negative detectin on the dc seems to work: ![image](https://github.com/Pennyw0rth/NetExec/assets/61382599/6cd1ab45-481e-4637-bb6b-b541e067d8f2) @Marshall-Hallenbeck also saw your command regarding ps_execute....

Great! I'll merge🚀

> @jubeaz can you run Ruff against this? Also, why the heck is the pipeline not running sometimes