Active Directory Exploitation Cheat Sheet

Knowledge Base Resources

Pricing: Free

Visit Website ↗

Active Directory Exploitation Cheat Sheet

What is Active Directory Exploitation Cheat Sheet

A collection of reports and resources highlighting Android security vulnerabilities and best practices.

Common Enumeration and Attack Methods for Windows Active Directory

This cheat sheet presents a compilation of frequently used enumeration and attack methods that are specifically designed for Windows Active Directory.

This Cheat Sheet Draws Inspiration from the PayloadAllTheThings Repository

This cheat sheet is inspired by the PayloadAllTheThings repo. Tools: - Domain Enumeration - Using PowerView - Using AD Module - Using BloodHound - Remote BloodHound - On-Site BloodHound - Using Adalanche - Remote Adalanche Useful Enumeration Tools: - Local Privilege Escalation - Useful Local Priv Esc Tools Lateral Movement: - PowerShell Remoting - Remote Code Execution with PowerShell Credentials - Import a PowerShell Module and Execute its Functions Remotely - Executing Remote Stateful Commands - Mimikatz - Remote Desktop Protocol - URL File Attacks Useful Tools: - Domain Privilege Escalation - Kerberoast - ASREPRoast - Password Spray Attack - Force Set SPN - Abusing Shadow Copies - List and Decrypt Stored Credentials using Mimikatz - Unconstrained Delegation - Constrained Delegation - Resource-Based Constrained Delegation - DNSAdmins Abuse - Abusing Active Directory-Integrated DNS - Abusing Backup Operators Group - Abusing Exchange - Weaponizing Printer Bug - Abusing ACLs - Abusing IPv6 with mitm6 - SID History Abuse - Exploiting SharePoint - Zerologon - PrintNightmare - Active

Active Directory Exploitation Cheat Sheet Reviews

No reviews yet.

Similar Tools

Free
Resources

SANS Institute

The SANS Institute is the world's most trusted and largest provider of information security training and certification. Committed to advancing cybersecurity, SANS offers an extensive, no-cost collection of research documents and operates the Internet Storm Center for early threat detection. Since its founding in 1989, SANS has empowered over 165,000 security professionals globally through collaborative learning and the development of practical solutions for complex information security challenges.

Industry-leading cybersecurity training and certification programsExtensive and free repository of information security research documentsOperates the Internet Storm Center for real-time threat intelligence
Free
Resources

Cybrary

Cybrary is a premier open-source platform for cybersecurity and IT professionals, offering a comprehensive ecosystem for learning and skill development. Access an ever-expanding catalog of online courses, hands-on labs, and certification preparation materials designed to empower individuals and organizations in the fight against evolving cyber threats. Our curated Skill and Career Paths, coupled with threat-informed training, provide the essential knowledge and practical experience needed to excel in the dynamic cybersecurity landscape.

Open-source learning platformExtensive catalog of cybersecurity and IT coursesHands-on labs and experiential tools

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by