Tool
PetitPotam
- First Reported
- May 11, 2026
- Latest Reported
- Aug 31, 2026
Reported Context (4)
- Once the trust gap is crossed, the path to domain-level privileges via open-source tools like PetitPotam is short. Spring Ring Campaigns Use Microsoft Teams Vishing to Deliver Malware and Attempt NTLM Relay
- NTLM relay coerced via PetitPotam, PrinterBug, and DFSCoerce Exposed Directory Reveals Aurora Affiliate’s Attacks on More Than 20 Organizations
- PetitPotam is then used to coerce dc01 at 192.168.0.10 into authenticating to the compromised host. BOFScale Runs Tailscale In-Memory to Route C2 Traffic Through CDN-Fronted WebSockets
- Performed an SMB Relay attack using PetitPotam. AI-Augmented Campaigns Target Government and Financial Organizations in Latin America
Malware (2)
People (1)
Threat Actors (3)
MITRE ATT&CK (54)
Vendors (5)
Products (34)
Tools (31)
Industries (12)
Countries (4)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.