daemon-sec-cheatsheet

The cheatsheet vault for operators: AD, enumeration, exploitation, priv-esc, web, DFIR
git clone https://git.daemon-sec.xyz/daemon-sec-cheatsheet.git
Log | Files | Refs | README | LICENSE

active-directory-attack.md (4283B)


      1 ---
      2 title: "Active Directory Attacks"
      3 topic: "Methodology and Resources"
      4 topicSlug: "methodology-and-resources"
      5 sourcePath: "Methodology and Resources/Active Directory Attack.md"
      6 sourceUrl: "https://github.com/swisskyrepo/PayloadsAllTheThings/blob/3ac27901c711/Methodology%20and%20Resources/Active%20Directory%20Attack.md"
      7 sha: "3ac27901c711"
      8 isReadme: false
      9 ---
     10 
     11 # Active Directory Attacks
     12 
     13 :warning: Content of this page has been moved to [InternalAllTheThings/active-directory](https://github.com/swisskyrepo/InternalAllTheThings/)
     14 
     15 - [Active Directory - Certificate Services](/internal/active-directory/ad-adcs-certificate-services)
     16 - [Active Directory - Access Controls ACL/ACE](/internal/active-directory/ad-adds-acl-ace)
     17 - [Active Directory - Enumeration](/internal/active-directory/ad-adds-enumerate)
     18 - [Active Directory - Group Policy Objects](/internal/active-directory/ad-adds-group-policy-objects)
     19 - [Active Directory - Groups](/internal/active-directory/ad-adds-groups)
     20 - [Active Directory - Linux](/internal/active-directory/ad-adds-linux)
     21 - [Active Directory - NTDS Dumping](/internal/active-directory/ad-adds-ntds-dumping)
     22 - [Active Directory - Read Only Domain Controller](/internal/active-directory/ad-adds-rodc)
     23 - [Active Directory - Federation Services](/internal/active-directory/ad-adfs-federation-services)
     24 - [Active Directory - Integrated DNS - ADIDNS](/internal/active-directory/ad-integrated-dns)
     25 - [Roasting - ASREP Roasting](/internal/active-directory/ad-roasting-asrep)
     26 - [Roasting - Kerberoasting](/internal/active-directory/ad-roasting-kerberoasting)
     27 - [Roasting - Timeroasting](/internal/active-directory/ad-roasting-timeroasting)
     28 - [Active Directory - Tricks](/internal/active-directory/ad-tricks)
     29 - [Deployment - SCCM](/internal/active-directory/deployment-sccm)
     30 - [Deployment - WSUS](/internal/active-directory/deployment-wsus)
     31 - [Hash - Capture and Cracking](/internal/active-directory/hash-capture)
     32 - [Hash - OverPass-the-Hash](/internal/active-directory/hash-over-pass-the-hash)
     33 - [Hash - Pass-the-Hash](/internal/active-directory/hash-pass-the-hash)
     34 - [Internal - DCOM](/internal/active-directory/internal-dcom)
     35 - [Internal - MITM and Relay](/internal/active-directory)
     36 - [Internal - PXE Boot Image](/internal/active-directory/internal-pxe-boot-image)
     37 - [Internal - Shares](/internal/active-directory/internal-shares)
     38 - [Kerberos - Bronze Bit](/internal/active-directory/kerberos-bronze-bit)
     39 - [Kerberos Delegation - Constrained Delegation](/internal/active-directory/kerberos-delegation-constrained)
     40 - [Kerberos Delegation - Resource Based Constrained Delegation](/internal/active-directory/kerberos-delegation-rbcd)
     41 - [Kerberos Delegation - Unconstrained Delegation](/internal/active-directory/kerberos-delegation-unconstrained)
     42 - [Kerberos - Service for User Extension](/internal/active-directory/kerberos-s4u)
     43 - [Kerberos - Tickets](/internal/active-directory/kerberos-tickets)
     44 - [Password - AD User Comment](/internal/active-directory/pwd-comments)
     45 - [Password - DSRM Credentials](/internal/active-directory/pwd-dsrm-credentials)
     46 - [Password - Group Policy Preferences](/internal/active-directory/pwd-group-policy-preferences)
     47 - [Password - Pre-Created Computer Account](/internal/active-directory/pwd-precreated-computer)
     48 - [Password - GMSA](/internal/active-directory/pwd-read-gmsa)
     49 - [Password - LAPS](/internal/active-directory/pwd-read-laps)
     50 - [Password - Shadow Credentials](/internal/active-directory/pwd-shadow-credentials)
     51 - [Password - Spraying](/internal/active-directory/pwd-spraying)
     52 - [Trust - Privileged Access Management](/internal/active-directory/trust-pam)
     53 - [Trust - Relationship](/internal/active-directory/trust-relationship)
     54 - [Child Domain to Forest Compromise - SID Hijacking](/internal/active-directory/trust-sid-hijacking)
     55 - [Forest to Forest Compromise - Trust Ticket](/internal/active-directory/trust-ticket)
     56 - [CVE](/internal/active-directory/cve/ms14-068)
     57     - [MS14-068 Checksum Validation](/internal/active-directory/cve/ms14-068)
     58     - [NoPAC / samAccountName Spoofing](/internal/active-directory/cve/nopac)
     59     - [PrintNightmare](/internal/active-directory/cve/printnightmare)
     60     - [PrivExchange](/internal/active-directory/cve/privexchange)
     61     - [ZeroLogon](/internal/active-directory/cve/zerologon)