leechristensen/SpoolSample
PoC tool to coerce Windows hosts authenticate to other machines via the MS-RPRN RPC interface. This is possible via other protocols as well. observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 2889
- days_rel: n/a
- days_push: 826
- n_releases_24m: 0
Adoption not part of the score
1141 stars · 151 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
SpoolSample is a C# proof-of-concept tool that coerces Windows hosts to authenticate to arbitrary machines via the MS-RPRN Print System Remote Protocol RPC interface. It is used in penetration testing to trigger authentication for relay or capture attacks against Active Directory environments.
Use cases
- coerce a Windows host to authenticate to my machine
- trigger NTLM authentication via the printer spooler service
- capture or relay credentials during a pentest
- demonstrate MS-RPRN authentication coercion in Active Directory
- test whether a domain controller is vulnerable to spooler coercion attacks
When to choose
- you are performing authorized penetration testing or red teaming against Windows/Active Directory
- you need a simple, proven PoC for MS-RPRN-based authentication coercion
- you want a lightweight C# tool that runs on Windows with .NET
When to avoid
- you need a supported, maintained security product rather than a proof-of-concept
- your target has the Print Spooler service disabled or patched
- you lack authorization to test the target environment
Facets
cli-tool · maturity maintenance
security networking rpc security penetration-testing windows windows dotnet cli coercion ms-rprn ntlm-relay active-directory red-team poc
1 source
- readme: https://github.com/leechristensen/SpoolSample · fetched 2026-08-28 · a90ca48cea19
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| leechristensen/SpoolSample | main | 32 |
For agents
markdown · JSON · MCP: product_card(name="leechristensen/SpoolSample")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem