Active Directory — topics
AD attack primitives. See active-directory for ordering.
Enumeration
Kerberos
- ntlm · kerberos
- asreproast · kerberoasting
- unconstrained-delegation · constrained-delegation
- resource-based-constrained-delegation
- silver-tickets · golden-tickets
- s4u2self-abuse · roastinthemiddle
ACL / object abuse
- acl-abuse · gpo-abuse · shadow-credentials
- adminsdholder-abuse · machine-account-quota-abuse
- dmsa-badsuccessor
Credential primitives
Relay and coercion
- ntlm-relay
- ntlm-relay-ws2025-mitigations
- printer-bug-spoolsample · petitpotam-coercion
- dfscoerce · shadowcoerce
- winreg-relay-2024
AD CS
- adcs-attacks — ESC1–ESC12 baseline.
- adcs-esc13-oid-group-linked
- adcs-esc14-altsecidentities
- adcs-esc15-ekuwu
- adcs-esc16-securityext-disabled