active-directory

Aug 18, 2026

• enumeration
• recon
• networking
• active-directory
• kerberos

Aug 18, 2026

• ad-cs
• certipy
• esc1
• esc9
• certificate-services
• active-directory
• oscp

Aug 18, 2026

• active-directory
• kerberos
• ntlm
• bloodhound
• responder
• credential-attack

Aug 18, 2026

• ad-permissions
• dacl
• acl-abuse
• bloodhound
• active-directory
• privilege-escalation

Aug 18, 2026

• impacket
• smb
• msrpc
• kerberos
• ldap
• ntlm
• lateral-movement
• active-directory
• pass-the-hash
• credential-dump

Aug 18, 2026

• reference
• credentials
• kerberos
• ntlm
• bloodhound
• pass-the-hash
• active-directory
• oscp
• decision-tree

Aug 18, 2026

• active-directory
• kerberos
• kpasswd
• smbpasswd
• password-change
• nt-status-password-must-change
• ad-password-must-change
• port-464
• port-646
• krb5-user
• clock-skew-too-great
• oscp

Aug 18, 2026

• reference
• attack-path
• methodology
• initial-foothold
• privesc
• active-directory
• oscp
• decision-tree

Aug 18, 2026

• reference
• ntds
• ntds.dit
• active-directory
• domain-controller
• ad-database
• ese
• etc-shadow
• credentials
• oscp

Aug 18, 2026

• nltest
• windows
• active-directory
• domain-trusts
• forest
• child-domain
• enumeration
• oscp

Aug 18, 2026

• powershell
• snippet
• adsync
• azure-ad-connect
• registry
• get-item
• get-itemproperty
• miiserver
• active-directory

Aug 18, 2026

• net
• net-user
• net-localgroup
• windows
• cmd
• enumeration
• manual-enum
• active-directory
• privilege-escalation
• oscp

Aug 18, 2026

• krb5.conf
• kerberos-setup
• generate-krb5-file
• krb5
• nxc
• kinit
• gettgt
• clock-skew
• active-directory

Aug 18, 2026

• time-sync
• ntp
• kerberos
• active-directory
• clock-skew
• clock-skew-too-great
• krb-ap-err-skew
• w32tm
• timedatectl
• ntpdate
• domain-controller
• oscp

Aug 18, 2026

• ad
• kerberoasting
• ldap
• smb-enum
• domain-credentials
• smb
• netbios
• active-directory
• bloodhound

Aug 18, 2026

• nmap
• netcat
• curl
• gobuster
• nikto
• wpscan
• bloodhound
• port-scanning
• web-server
• directory-brute-force
• vulnerability-scanning
• wordpress
• active-directory

Aug 18, 2026

• rpc
• msrpc
• rpcclient
• rpcdump
• netexec
• crackmapexec
• impacket
• enumeration
• windows
• active-directory
• dynamic-ports

Aug 18, 2026

• kerberoasting
• ad
• active-directory
• password-attacks
• kerberos
• tgt
• tgs
• clock-skew

Aug 18, 2026

• pidgin
• xmpp
• jabber
• openfire
• 5222
• 5223
• user-enumeration
• active-directory
• recon

Aug 18, 2026

• ldapsearch
• ldap
• ldaps
• active-directory
• enumeration
• 389
• 636
• users
• groups
• user-export
• userlist
• dn-cn

Aug 18, 2026

• evil-winrm
• winrm
• wsman
• remote-access
• windows
• pass-the-hash
• powershell
• lateral-movement
• post-exploitation
• active-directory

Aug 18, 2026

• krb5-user
• kerberos
• kinit
• kpasswd
• klist
• kdestroy
• kvno
• ktutil
• krb5.conf
• port-464
• active-directory
• oscp

Aug 18, 2026

• gmsa
• group-managed-service-account
• active-directory
• golden-gmsa
• netexec
• bloodyad
• ldeep
• oscp

Aug 18, 2026

• rusthound
• rusthound-ce
• bloodhound
• active-directory
• ldap
• collection
• enumeration
• adcs
• kerberos
• oscp

Aug 18, 2026

• certipy
• certify
• ad-cs
• certificate-services
• esc1
• esc8
• active-directory
• pkinit
• windows
• linux
• privilege-escalation

Aug 18, 2026

• dmsa
• badsuccessor
• delegated-managed-service-account
• active-directory
• kerberos
• rubeus
• bloodyad
• oscp

Aug 18, 2026

• runascs
• lateral-movement
• windows
• credentials
• runas
• active-directory
• oscp

Aug 18, 2026

• kerberoasting
• as-rep-roasting
• active-directory
• kerberos
• spn
• credential-attack
• impacket
• rubeus
• hashcat
• john
• lateral-movement
• targetedkerberoast
• tombstone

Aug 18, 2026

• krbrelayx
• dnstool
• addspn
• printerbug
• adidns
• active-directory
• dns
• kerberos
• spn
• oscp

Aug 18, 2026

• responder
• llmnr
• nbt-ns
• ntlm
• ntlmv2
• hash-capture
• relay
• ntlmrelayx
• credential-attack
• active-directory
• smb
• wpad
• poison

Aug 18, 2026

• shadow-credentials
• pywhisker
• pkinit
• pkinittools
• gettgtpkinit
• getnthash
• msds-keycredentiallink
• genericwrite
• active-directory
• kerberos
• oscp

Aug 18, 2026

• rubeus
• kerberos
• kerberoasting
• as-rep-roasting
• pass-the-ticket
• golden-ticket
• active-directory
• windows
• lateral-movement

Aug 18, 2026

• sharphound
• bloodhound
• active-directory
• collection
• ldap
• session
• acl
• enumeration
• oscp

Aug 18, 2026

• bloodhound
• sharphound
• active-directory
• graph-analysis
• privilege-escalation
• enumeration
• domain-admin
• attack-path
• kerberos
• acl-abuse

Aug 18, 2026

• kerbrute
• kerberos
• user-enumeration
• password-spray
• active-directory
• domain
• 88
• pre-auth
• credential-attack

Aug 18, 2026

• get-aduser
• get-adcomputer
• get-adgroup
• active-directory
• powershell
• rsat
• ldap
• domain-enum
• oscp

Aug 18, 2026

• ntlm_theft
• ntlm
• ntlmv2
• hash-capture
• phishing
• payload
• active-directory
• social-engineering
• responder
• file-upload
• credential-attack

Aug 18, 2026

• powerview
• powershell
• active-directory
• ldap
• enumeration
• spn
• acl
• domain
• oscp

Aug 18, 2026

• gmsa
• gmsadumper
• active-directory
• ldap
• intelligence
• oscp

Aug 18, 2026

• bloodyad
• active-directory
• ldap
• ldaps
• dcsync
• genericall
• rbcd
• shadow-credentials
• privilege-escalation
• acl-abuse
• oscp

Aug 18, 2026

• rpcclient
• smb
• rpc
• enumeration
• users
• groups
• sid
• active-directory

Aug 18, 2026

• rpcclient
• enumdomusers
• queryuser
• rid
• enumeration
• active-directory
• description
• credentials
• oscp

Aug 18, 2026

• nxcspray
• netexec
• nxc
• crackmapexec
• password-spray
• credential-reuse
• lateral-movement
• smb
• winrm
• ldap
• active-directory
• oscp

Aug 18, 2026

• impacket
• kerberos
• kerberoasting
• asrep-roasting
• getuserspns
• getnpusers
• gettgt
• getst
• ticketer
• golden-ticket
• active-directory

Aug 18, 2026

• impacket
• ntlmrelayx
• ntlm-relay
• responder
• pass-the-hash
• smb-signing
• lateral-movement
• active-directory