Attacking Active Directory
search
⌘Ctrlk
Attacking Active Directory
  • Reconnaissance
  • Exploiting With Poison and Relay
  • User Enumeration Exploit
    • setup /etc/hosts and kerberos
    • Exploiting Username - ASREPRoast
    • Password Spraying
    • User listing with GetADUsers and ldapsearch
    • Kerberoasting
    • Powerview
    • Enumerate Shares with User Account
  • Exploiting with Users
  • WSUS Exploit
  • Active Directory Certificate Services (ADCS)
  • Metasploit
  • Privilege Escalation
  • User ACL Exploits
  • MSSQL servers Exploitation
  • Delegations
  • Trust
  • Exploiting IIS & Privilege escalation
  • Impacket
gitbookPowered by GitBook
block-quoteOn this pagechevron-down

User Enumeration Exploit

setup /etc/hosts and kerberoschevron-rightExploiting Username - ASREPRoastchevron-rightPassword Sprayingchevron-rightUser listing with GetADUsers and ldapsearchchevron-rightKerberoastingchevron-rightPowerviewchevron-rightEnumerate Shares with User Accountchevron-right
PreviousCoerced auth smb + ntlmrelayx to ldaps with drop the micchevron-leftNextsetup /etc/hosts and kerberoschevron-right

Last updated 2 years ago