// ACTIVE_DIRECTORY

The Realm of the Domain Controllers. Enumeration, Attacks, and Persistence.

• :material-magnify: Reconnaissance

  • Powerview, Bloodhound, LDAP.

• :material-sword-cross: Attacks

  • Kerberoasting, ASREPRoasting, Zerologon.

• :material-arrow-decision: Lateral Movement

  • PtH, PtT, Overpass-the-Hash.

• :material-archive-clock: Persistence

  • Golden/Silver Tickets, Skeleton Key.

• :material-handshake: Trusts

  • Forest/Domain Trusts.

• :material-certificate: AD CS

  • Certified Pre-Owned (ESC1-ESC8).