0 Payloads
Upstream SourceMethodology and Resources Payloads & Testing Methodology
:warning: Content of this page has been moved to [InternalAllTheThings/active-directory](https://github.com/swisskyrepo/InternalAllTheThings/)
Overview (README)Active Directory AttackBind Shell CheatsheetCloud - AWS PentestCloud - Azure PentestCobalt Strike - CheatsheetContainer - Docker PentestContainer - Kubernetes PentestEscape BreakoutHTML SmugglingHash CrackingInitial AccessLinux - EvasionLinux - PersistenceLinux - Privilege EscalationMSSQL Server - CheatsheetMetasploit - CheatsheetMethodology and enumerationNetwork DiscoveryNetwork Pivoting TechniquesOffice - AttacksPowershell - CheatsheetReverse Shell CheatsheetSource Code ManagementVulnerability ReportsWeb Attack SurfaceWindows - AMSI BypassWindows - DPAPIWindows - DefensesWindows - Download and ExecuteWindows - MimikatzWindows - PersistenceWindows - Privilege EscalationWindows - Using credentials
Active Directory Attacks#
:warning: Content of this page has been moved to InternalAllTheThings/active-directory
- Active Directory - Certificate Services
- Active Directory - Access Controls ACL/ACE
- Active Directory - Enumeration
- Active Directory - Group Policy Objects
- Active Directory - Groups
- Active Directory - Linux
- Active Directory - NTDS Dumping
- Active Directory - Read Only Domain Controller
- Active Directory - Federation Services
- Active Directory - Integrated DNS - ADIDNS
- Roasting - ASREP Roasting
- Roasting - Kerberoasting
- Roasting - Timeroasting
- Active Directory - Tricks
- Deployment - SCCM
- Deployment - WSUS
- Hash - Capture and Cracking
- Hash - OverPass-the-Hash
- Hash - Pass-the-Hash
- Internal - DCOM
- Internal - MITM and Relay
- Internal - PXE Boot Image
- Internal - Shares
- Kerberos - Bronze Bit
- Kerberos Delegation - Constrained Delegation
- Kerberos Delegation - Resource Based Constrained Delegation
- Kerberos Delegation - Unconstrained Delegation
- Kerberos - Service for User Extension
- Kerberos - Tickets
- Password - AD User Comment
- Password - DSRM Credentials
- Password - Group Policy Preferences
- Password - Pre-Created Computer Account
- Password - GMSA
- Password - LAPS
- Password - Shadow Credentials
- Password - Spraying
- Trust - Privileged Access Management
- Trust - Relationship
- Child Domain to Forest Compromise - SID Hijacking
- Forest to Forest Compromise - Trust Ticket
- CVE
- MS14-068 Checksum Validation
- NoPAC / samAccountName Spoofing
- PrintNightmare
- PrivExchange
- ZeroLogon