Active Directory Enumeration and Exploitation

Kerberos Attacks

Kerberoasting Kerberoasting is an attack against service accounts that allows an attacker to perf...

NetExec Cheatsheet

A cheatsheet for NetExec, featuring useful commands and modules for different services. NetExec:...

Abusing Resource-Based Constrained Delegation

RBCD Enumerate MachineAccountQuota ➜ nxc ldap DC01.push.vl -u kelly.hill -p '<REDACTED>' -M maq ...

Miscellaneous

User SID and RID In Active Directory, any group or user that Windows doesn't create has a RID of ...

ACL

GenericWrite Update object's attributes targetKerberoasting python targetedKerberoast.py -v -d ...

BloodyAD

Retrieve User Information bloodyAD --host $dc -d $domain -u $username -p $password get object $ta...

Join A Domain

Joining a Windows Machine to a Domain Prerequisites A user account with permissions to join comp...