Home / Skills / coercion-ntlm-relay
coercion-ntlm-relay
ADScanPro/Claude-ADSkill
Authentication coercion (PetitPotam MS-EFSR, PrinterBug MS-RPRN, DFSCoerce MS-DFSNM) chained into NTLM relay (impacket ntlmrelayx) toward LDAP, AD CS web enrollment (ESC8), or SMB. Use when SMB signing is not enforced or LDAP channel binding is missing, and you want to force a privileged machine account to authenticate to your relay and turn that into RBCD, a DCSync-capable ACL grant, or a certificate. Includes the exact Coercer/ntlmrelayx commands, requirements, detection, and remediation.
Why this score
This repo hosts 8 skills, so its 212 stars are split between them (about 27 each) for scoring.
Popularity score: 58/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 73efec51207f, with Cisco's open-source skill-scanner.
None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This onecoercion-ntlm-relay ADScanPro/Claude-AD · Skill | 58 | ★ 212 | ≈129 always | 2mo ago |
| claude-relay vildanbina/claude-relay · Plugin Both about relay | 63 | ★ 61 | not measured | 2mo ago |
| browser-relay reliefeai/browser-relay · Skill Both about relay and machine | 66 | ★ 135 | ≈74 always | 2mo ago |
| mex-relay mex-memory/mex · Skill Both about relay | 69 | ★ 1.8k | ≈22 always | 16d ago |
| zhangyi-relay aph199686/zhangyi-studio · Skill Both about relay | 54 | ★ 119 | ≈75 always | 18d ago |
| relay-80-100-workflow AgentWorkforce/relay · Skill Both about relay | 64 | ★ 888 | ≈131 always | 16d ago |