Proof-of-concept implementations that coerce a Windows host to initiate NTLM authentication to a supplied listener by calling MS-EFSRPC. The Python implementation uses Impacket and accepts the listener and target as positional arguments. PetitPotam does not itself capture or relay the authentication, or execute remote commands; those outcomes require separate infrastructure and a relayable target.
Python, C++
RESTRICTED_ACCESS_BLUR_MARKER