Active Directory

This section is under construction

Name	Tags
Password Spraying	Initial AccessLateral MovementAuthenticated
LLMNR Poisoning	Initial AccessNETBIOSLLMNR
Kerberoast	KerberosAuthenticated
DCSync	AuthenticatedDS-Replication-Get-Changes
DCShadow	Domain AdminOPSECAuthenticated
Golden Ticket	KerberosPersistenceAuthenticated
Silver Ticket	KerberosPersistenceAuthenticated
Diamond Ticket	KerberosAuthenticatedPersistenceOPSEC
ASREPRoast	KerberosUnauthenticatedInitial Access
ADCS	AuthenticatedCertificate ServicePrivilege Escalation
Domain ACLs	GenericAllGenericWriteWritePropertySelf-MembershipForceChangePasswordWriteOwnerWriteDACLDS-Replication-Get-Changes
Constrained Delegation	KerberosAuthenticatedmsds-allowedtodelegatetoElevated
Unconstrained Delegation	KerberosAuthenticatedElevated
Resource-Based Constrained Delegation	KerberosAuthenticatedmsDS-AllowedToActOnBehalfOfOtherIdentityElevated
Pass The Ticket	KerberosAuthenticatedElevatedLateral Movement
Pass The Hash	KerberosAuthenticatedLateral MovementLSASS
Overpass The Hash	KerberosElevatedAuthenticatedLateral Movement
Group Membership	Privilege EscalationAuthenticatedLateral Movement
MSSQL Abuse	AuthenticatedLateral MovementPrivilege Escalation
Credential Dumping	AuthenticatedPrivilege EscalationElevatedLSASSLateral MovementKerberosMimikatzImpacketRubeus
LNK File Attacks	Initial AccessLateral Movement
GPP Password	SMBAuthenticatedUnauthenticatedLateral MovementPrivilege Escalation
Relay Attacks	Initial AccessSMBNETBIOSLLMNR
IPv6 Attacks	Initial AccessMITM6
Hash Cracking	Privilege EscalationLateral Movement
Domain Wide Enumeration	Privilege EscalationAuthenticatedBloodhoundPingCastleDACL
Credential Hunting
Password Stuff	Lateral MovementPrivilege EscalationInitial AccessAuthenticatedUnauthenticated
Word Doc Macro	Initial Access
Host Persistence
Unquoted Service Path	Privilege EscalationAuthenticatedLocal
Weak Service Permissions	Privilege Escalation
Weak Service Binary Permissions	Privilege Escalation
UAC Bypasses	Privilege Escalation
Lateral Movement
Alternate Service Name
Service for User to Self	S4U2SelfS4U2Proxy
Pivoting
Group Policy Abuse
Microsoft Configuration Manager
Forest & Domain Trusts
Local Administrator Password Solution	LAPS
AppLocker
Password Policy Enumeration
Domain User Enumeration
Host Enumeration
NetNTLM Hash Stealing Locations
SMB
Token Privileges	LocalPrivilege EscalationSeImpersonatePrivilegeSeAssignPrimaryPrivilegeSeTcbPrivilegeSeBackupPrivilegeSeRestorePrivilegeSeCreateTokenPrivilegeSeLoadDriverPrivilegeSeTakeOwnershipPrivilegeSeDebugPrivilege

Active Directory

Active Directory Attacks