CRTP Active Directory Notes Available Here CRTE Notes Available Here CRTO Notes Available Here

Active Directory Mindmap

Mindmap Link.

Notes/Cheatsheets/Mindmaps and Enumeration Tools

• Active Directory Basics

  • https://youtube.com/playlist?list=PL1l78n6W8zypXtkh3uWIXbPssc4IGbfb5

• NOTES/CheatSheets

  • The Hacker Recipes : https://www.thehacker.recipes/ad

  • 0xJs RedTeaming Notes : https://github.com/0xJs/RedTeaming_CheatSheet

  • Active Directory Notes : https://book.hacktricks.xyz/windows-hardening/active-directory-methodology

  • PayloadAllThings Notes : https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology and Resources/Active Directory Attack.md

  • XCT’s Notes : https://notes.vulndev.io/notes/redteam/active-directory

  • S1ckB0y1337 - Active Directory Exploitation : https://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#readme

  • Integration-IT - Active Directory Exploitation Cheatsheet : https://github.com/Integration-IT/Active-Directory-Exploitation-Cheat-Sheet

  • Mahyar Notes : https://tajdini.net/blog/penetration/active-directory-penetration-mind-map/

  • Ired Team : https://www.ired.team/offensive-security-experiments/active-directory-kerberos-abuse/

  • Impacket Tools Notes : Official Docs And https://tools.thehacker.recipes/impacket#library-protocols

  • Checkout these Notes By Joas

    Windows Server and Active Directory - PenTest.pdf

  • WADComs - Interactive cheat sheet For Active Directory Similar to LOLBins and GTFOBins : https://wadcoms.github.io/

  • Darth Sidious - Active Directory Notes : https://chryzsh.gitbooks.io/darthsidious/content/

  • AD Notes for CRTP, CRTO, CRTE : https://casvancooten.com/posts/2020/11/windows-active-directory-exploitation-cheat-sheet-and-command-reference/

• Blogs/Writeups

  • Active Directory Security Blog - https://adsecurity.org/
  • Harmj0y Blog - http://blog.harmj0y.net/
  • Hackndo - https://en.hackndo.com/
  • zer1t0 (Everything About AD Attack - AD Attacks in depth) - https://zer1t0.gitlab.io/posts/attacking_ad/
  • AD Pentesting Checklist : https://infosecwriteups.com/active-directory-penetration-testing-cheatsheet-5f45aa5b44ff
  • Playing With Hashes and Tickets : https://0x00sec.org/t/playing-with-hashes-and-tickets/26604/2

• MINDMAPS

  • Orange-CyberDefense : https://raw.githubusercontent.com/Orange-Cyberdefense/arsenal/master/mindmap/pentest_ad_dark.png
  • Mahyar Cheatsheet (All in One) : https://tajdini.net/blog/wp-content/uploads/2021/09/Active-Directory-Penetration-Manual.pdf
  • WADComs - Interactive cheat sheet For Active Directory Similar to LOLBins and GTFOBins : https://wadcoms.github.io/

• ENUMERATION TOOLS

  • LinWinPwn - https://github.com/lefayjey/linWinPwn

Active Directory - Lab Build

• John Hammond Active Directory Home Lab Build
  • https://www.youtube.com/watch?v=pKtDQtsubio&list=PL1H1sBF1VAKVoU6Q2u7BBGPsnkn-rajlp&index=1
  • https://www.youtube.com/watch?v=19pNfFnBfI8&list=PL1H1sBF1VAKVoU6Q2u7BBGPsnkn-rajlp&index=2
  • https://www.youtube.com/watch?v=59VqS6wMn6w&list=PL1H1sBF1VAKVoU6Q2u7BBGPsnkn-rajlp&index=3+
• Active Directory Lab Build by TCM Topics
  • Setting Up Domain Controllers
  • Setting up the User Machines
  • Joining Machines to the Domain Controllers
• TCM - How to build an Active Directory Hacking Lab on Youtube
• GOAD (Game of Active Directory) Lab - https://github.com/Orange-Cyberdefense/GOAD

Using Credentials to Own Windows Boxes