hunting-ntlm-coercion-and-relay SKILL.md skillA
hunting-ntlm-coercion-and-relay from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/hunting-ntlm-coercion-and-relay@git:20260908.e3ae18aPins git:20260908.e3ae18a in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/hunting-ntlm-coercion-and-relay/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260908.e3ae18a, committed Sep 8, 2026
- Size
- 10,141 bytes
- Repository stars
- 26
- License
- MIT
Hunt authentication coercion and relay on a Windows network, where an attacker induces a privileged machine or account to authenticate to a host it controls and forwards that authentication to a service that does not bind or verify the channel, authenticating as the coerced identity because signing is not enforced and channel binding is absent. Use when services accept network authentication without mandatory signing or channel binding and a privileged host can be induced to authenticate…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Hunting NTLM coercion and relay: when a forced login lands on the wrong service Windows authentication was designed to be forwarded: a client proves who it is to a server, and nothing in a challenge-response exchange inherently ties that proof to the service the client meant to reach. An attacker exploits both halves. First coercion: a feature that makes a machine or account connect outbound, an automatic connection to a supplied path, a print or backup trigger, or any function that authenticates to an attacker-named host. Second relay: the captured authentication is forwarded to a different service, and if that service does not require signing or verify channel binding, it accepts the forwarded proof and treats the attacker as the coerced identity. A relayed domain controller or privileged host becomes control of that service. The bug is a service that accepts network authentication without binding it to the channel, reachable by an identity an attacker can coerce. You hunt these by pairing coercion triggers with services that fail to enforce signing or channel binding. ## When to use …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/hunting-ntlm-coercion-and-relay@sha256:e3bcbc52cdd0984fThe line at the top of this page pins the label git:20260908.e3ae18a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ix6cnw6dz5kgfh7p)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Sep 8, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10141 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ix6cnw6dz5kgfh7p GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/hunting-ntlm-coercion-and-relay GET https://markdownregistry.com/api/v1/blob/e3bcbc52cdd0984f66e4319e21b7956b319917700f12651d890a346caa92cc15
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.