Skip to main content
Advanced Search
Search Terms
Content Type

Exact Matches
Tag Searches
Date Options
Updated after
Updated before
Created after
Created before

Search Results

310 total results found

Information Technology

information-technology
IT
systems-administration
sysadmin
network-administration
network-administration

Active Directory

Also, consider taking a look at my Active Directory Attack Map. While it doesn't cover every possible attack avenue, and isn't as sophisticated as some other mindmaps, I think it does a pretty good job of visualizing some of the information found in this book.

active-directory

Hash Cracking

hash
encryption
hashing
hashes

Defensive Cybersecurity

defend
cybersecurity
threat-hunting
siem

Post Exploitation: Enumeration

Active Directory

active-directory
post-exploitation

LLMNR Poisoning

Active Directory Initial Attack Vectors: Local Area Network

Note: Network Environment Given that LLMNR is a name resolution protocol that works on the Local Area Network (LAN), this attack method cannot be performed from a different subnet. The attacker would have to compromise a host on the LAN and upload tools, or p...

llmnr
llmnr-poisoning
internal

Web

web
www
html
http
javascript
css

Offensive Cybersecurity

attack
pentesting
red-team

Post Exploitation: Attacks

Active Directory

active-directory
post-exploitation
attack-vectors

SMB Relay

Active Directory Initial Attack Vectors: Multipurpose

Note: Network Environment This attack works best in a flat network. However, as long as the attacker machine and target(s) are routeable and no firewalls are blocking required ports, it could work across network segments. What is SMB Relay? A man-in-the-mid...

internal
external
active-directory
smb

Nmap

nmap
networking

IPv6 DNS Spoofing

Active Directory Initial Attack Vectors: Local Area Network

Note: Network Environment This spoofing attack works by sending a router announcement to multicast ff02::1. Therefore, it will only affect domain-joined hosts on the same segment as the attacker machine. What is IPv6 DNS Spoofing? An attacker announces ...

internal
active-directory
ipb6

Network Pivoting

networking
pivoting
lateral-movement

Passback Attacks

Active Directory Initial Attack Vectors: Multipurpose

What's the Flaw? Usually involves an unsecure device -- like a printer or multifunction device -- which is configured with an LDAP or SMTP client and credentials. It could be a web server too -- where there is an LDAP or SMTP client. The credentials are usual...

internal
external
active-directory
passback

File Transfers and Data Exfiltration

file-transfer
data-exfiltration

PowerView

Active Directory Post Exploitation: Enumeration

Overview A set of PowerShell functions that can be used to enumerate ActiveDirectory. Part of the larger PowerSploit Framework   Usage Transfer PowerView.ps1 to the compromised target. Requires a PowerShell session. Then, source the file into the current s...

Port Forwarding and Proxying

Network Pivoting

port-forwarding
proxying
networking

BloodHound

Active Directory Post Exploitation: Enumeration

Install and Initial Setup Kali Linux When changing the neo4j user password at initial setup, I was experiencing authentication errors when the password contained specific special characters. So, if the password in /etc/bhapi/bhapi.json is correct, but you ex...
Back to top