Research notes

This blog post will walk you through the steps of remotely capturing traffic from a domain controller and then analyzing it locally.…

To compare Active Directory accounts against breached passwords you need access to your Active Directory with a specific privileged account, a password…

A regular domain user can easily take over the entire Active Directory domain. While we still recommend that the print spooler service…

Summary Active Directory Exploitation Cheatsheet Summary Tools Domain Enumeration Using PowerView Using AD Module Using BloodHound Useful Enumeration Tools Local Privilege Escalation…

This article contains a list of PowerShell commands collected from various corners of the Internet which could be helpful during penetration tests…