active-directory
Everything tagged "active-directory".
Active Directory Concepts notes 12 min 01 Aug 2026 The terms the Active Directory workflow and its attack notes assume. AD Lateral Movement notes 5 min 01 Aug 2026 Lateral movement reuses a credential (password or NT hash) to run code on another host, no cracking needed. BloodHound notes 4 min 01 Aug 2026 BloodHound ingests AD data and renders it as a graph of objects and the control relationships between them, then answers attack-path questions like 'shortest path to Domain Admin' directly. NTDS.dit Extraction notes 2 min 29 Aug 2026 Offline route to every hash in the domain: copy `ntds.dit` off a running DC and decrypt it on Kali. Password Spraying notes 4 min 01 Aug 2026 Spraying is the inverse of [Brute Forcing Logins](/collections/oscp/brute-forcing-logins): one password tried across many accounts, instead of many passwords against one account. Active Directory notes 3 min 01 Aug 2026 Active Directory (AD) is both a directory of an organisation's users, groups, and computers, and the management layer that controls them. Active Directory Enumeration notes 10 min 01 Aug 2026 Enumeration is most of the work in an AD assessment. Impacket notes 3 min 25 Aug 2026 Python collection for AD network protocols: SMB, WMI, Kerberos, LDAP, DRSUAPI, MSSQL. LAPS notes 2 min 03 Aug 2026 LAPS (Local Administrator Password Solution) exists because every machine deployed from one image shares one local Administrator password, so a single dumped hash pass-the-hashes across the whole estate. NetExec notes 4 min 01 Aug 2026 NetExec is the maintained successor to CrackMapExec (CME), which was abandoned in 2023; the community forked it and renamed the binary `nxc`. ACL Abuse notes 2 min 01 Aug 2026 Every AD object carries a DACL that lists who can do what to it. LLMNR Poisoning and NTLM Relay notes 3 min 01 Aug 2026 When a Windows host cannot resolve a name over DNS, it falls back to broadcast name resolution (LLMNR, NBT-NS, mDNS) and asks the whole local segment "who is X?". pyGPOAbuse notes 3 min 25 Aug 2026 Partial Python port of SharpGPOAbuse. AD Persistence notes 1 min 01 Aug 2026 Persistence keeps access to a domain after full compromise. DCSync notes 1 min 01 Aug 2026 DCSync abuses the directory replication protocol (MS-DRSR / DRSUAPI).
nothing matches that filter.