Active-Directory-Exploitation-Cheat-Sheet
This repository is a reference source for Windows Active Directory environments that includes common methods of information collection and attack. Domain discovery offers command and tool summaries of local and domain privilege enhancement, lateral motion, and permanence techniques. It was prepared by Nikos Katsiopis and Nikos Vourdas.
S1ckB0y1337 · Security & Penetration Testing
Common commercial products in this category: Burp Suite Professional, Nessus, Cobalt Strike
- You can do domain discovery using PowerView, BloodHound and Adalanche tools.
- With Kerberoast, ASREPRoast, and password-spray attacks, you can upgrade privileges in the domain.
- With the Golden Ticket, DCSync and Silver Ticket methods, you can maintain permanence over the domain.
- • No published release
- • NeutralGitHub Issue
tgtdeleg confusion
“hi @S1ckB0y1337 , I'm trying to conduct RBCD, and really confused with this note: In Constrain and Resource-Based Constrained Delegation if we don't have the password/hash of the account with TRUSTED_TO_AUTH_FOR_DELEGATION that we try to abuse, we can use the very nice trick…”
My note
Alternative pages
More in: Security & Penetration Testing
- PayloadsAllTheThings★ 82,253 · today
- strix★ 72,968 · today
- Metasploit Framework★ 39,279 · today
- Trivy★ 38,868 · today
- CyberChef★ 36,270 · yesterday
- pentagi★ 32,822 · 8 days ago