Active-Directory on MrAzoth https://az0th.it/tags/active-directory/ Recent content in Active-Directory on MrAzoth Hugo -- 0.154.5 en-us Enumeration & Discovery — From Kali https://az0th.it/ad/kali/enumeration/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/kali/enumeration/ Comprehensive Active Directory enumeration from a Kali/Linux attacker host: port scanning, DNS, LDAP, BloodHound, Kerbrute, NetExec, rpcclient, windapsearch, and more. Delegation Attacks — From Windows https://az0th.it/ad/windows/delegation-attacks/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/windows/delegation-attacks/ Abusing Kerberos delegation (Unconstrained, Constrained, RBCD, Shadow Credentials) from a Windows foothold using Rubeus, PowerView, and PowerMad. Domain & Forest Trusts — From Windows https://az0th.it/ad/windows/domain-trusts/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/windows/domain-trusts/ Enumerating and exploiting Active Directory domain and forest trusts from a Windows foothold: SID history injection, golden ticket cross-domain, inter-realm key abuse. Persistence — From Windows https://az0th.it/ad/windows/persistence/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/windows/persistence/ Domain persistence techniques after AD compromise: Golden/Silver/Diamond Tickets, DCSync backdoors, AdminSDHolder, ACL abuse, WMI subscriptions, and DPAPI backup keys. AD CS Attacks — From Kali https://az0th.it/ad/kali/adcs-attacks/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/kali/adcs-attacks/ Active Directory Certificate Services exploitation from Kali: ESC1-ESC8, Certipy enumeration, certificate request abuse, NTLM relay to CA, and Pass-the-Certificate. AD CS Attacks — From Windows https://az0th.it/ad/windows/adcs-attacks/ Mon, 01 Jan 0001 00:00:00 +0000 https://az0th.it/ad/windows/adcs-attacks/ Active Directory Certificate Services exploitation from Windows: ESC1-ESC8 with Certify, ForgeCert, Rubeus, and Pass-the-Certificate.