Active Directory — topics
AD attack primitives. See active-directory for ordering.
Enumeration
Kerberos
- ntlm · kerberos
- asreproast · kerberoasting
- unconstrained-delegation · constrained-delegation
- resource-based-constrained-delegation
- silver-tickets · golden-tickets
ACL / object abuse
Credential primitives
Relay
AD CS
- adcs-attacks — ESC1–ESC13 baseline.
- adcs-esc14-altsecidentities
- adcs-esc15-ekuwu
- adcs-esc16-securityext-disabled