01 ADActive-Directory_cheat_sheet 2026-08-1002 ADAD Recycle Bin Enumeration & Deleted-Object Recovery 2026-09-2503 ADADCS Attack Methodology 2026-08-0904 ADAttack #1 — Password Spraying 2026-08-1005 ADAttack #12 — Silver Ticket Attack 2026-08-1006 ADAttack #13 — Diamond Ticket Attack 2026-08-1007 ADAttack #15 — Unconstrained Delegation Abuse 2026-08-1008 ADAttack #19 — GenericAll Abuse 2026-08-1009 ADAttack #22 — WriteOwner Abuse 2026-08-1010 ADAttack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-1011 ADAttack #26 — AdminSDHolder Persistence via ACL 2026-08-1012 ADAttack #27 — ESC1 SAN Specification in Template 2026-08-1013 ADAttack #28 — ESC2 Any Purpose EKU No EKU 2026-08-1014 ADAttack #29 — ESC3 Certificate Request Agent 2026-08-1015 ADAttack #30 — ESC4 Template Write Permissions 2026-08-1016 ADAttack #31 — ESC6 EDITF_ATTRIBUTESUBJECTALTNAME2 Flag 2026-08-1017 ADAttack #32 — ESC7 Vulnerable CA Officer Permissions 2026-08-1018 ADAttack #33 — ESC8 NTLM Relay to ADCS HTTP Endpoint 2026-08-1019 ADAttack #34 — ESC11 NTLM Relay to ADCS RPC 2026-08-1020 ADAttack #35 — Golden Certificate Attack 2026-08-1021 ADAttack #36 — Certifried (CVE-2022-26923) 2026-08-1022 ADAttack #41 — PetitPotam (CVE-2021-36942) 2026-08-1023 ADAttack #42 — PrinterBug SpoolSample 2026-08-1024 ADAttack #44 — noPAC Sam-the-Admin (CVE-2021-42278 42287) 2026-08-1025 ADAttack #45 — Token Impersonation (SeImpersonatePrivilege) 2026-08-1026 ADAttack #51 — Abusing Server Operators Group 2026-08-1027 ADAttack #64 — Golden Ticket Persistence 2026-08-1028 ADAttack #65 — ACL Backdooring (Persistence via DCSync ACE) 2026-08-1029 ADAttack #67 — ADCS Certificate-Based Persistence 2026-08-1030 ADAttack #70 — ADCS Cross-Domain Enrollment 2026-08-1031 ADAttack #76 — MSSQL Server and Linked Server Abuse 2026-08-1032 ADAttack #77 — DFSCoerce MS-DFSNM Coercion 2026-08-1033 FLOWAttack Flow Guide 2026-07-1834 WEBBlind XSS Tool - ezXSS 2026-08-1035 ADCertificate Persistence — Certifried (CVE-2022-26923) 2026-08-1036 ADCertipy 2026-08-0937 ADCertipy-ad 2026-08-1038 TOOLdd tool 2026-08-1039 ADDPERSIST2 — Rogue CA Certificate (NTAuth Injection) 2026-08-1040 ADDPERSIST3 — Malicious Misconfiguration (ACL Backdoor) 2026-08-1041 ADESC1 — SAN Specification in Template 2026-08-1042 ADESC10 — Weak Certificate Mapping 2026-08-1043 ADESC11 — NTLM Relay to ADCS RPC (ICPR) 2026-08-1044 ADESC12 — Shell Access to CA with YubiHSM 2026-08-1045 ADESC13 — Issuance Policy OID Group Link 2026-08-1046 ADESC14 — Weak Explicit Certificate Mapping 2026-08-1047 ADESC15 — EKUwu (CVE-2024-49019) 2026-08-1048 ADESC16 — Security Extension Disabled on CA (Globally) 2026-08-1049 ADESC17 — ADCS Certificate Spoofing to Attack HTTPS-Enabled WSUS Clients 2026-08-1050 ADESC2 — Any Purpose EKU No EKU (The Swiss Certificate) 2026-08-1051 ADESC3 — Misconfigured Enrollment Agent Templates 2026-08-1052 ADESC4 — Vulnerable Certificate Template Access Control 2026-08-1053 ADESC5 — Vulnerable PKI Object Access Control 2026-08-1054 ADESC6 — EDITF_ATTRIBUTESUBJECTALTNAME2 Flag 2026-08-1055 ADESC7 — Vulnerable CA Access Control (ManageCA ManageCertificates) 2026-08-1056 ADESC8 — NTLM Relay to ADCS HTTP Web Enrollment 2026-08-1057 ADESC9 — No Security Extension (Template-Level) 2026-08-1058 GITGit — Complete Branch & Vault Management Guide 2026-08-1059 ADGolden Certificate Attack — DPERSIST1 2026-08-1060 FLOWHTB Attack Flow Playbook 2026-08-2761 TOOLInternet Archival Guide 2026-08-1062 ADkrbrelayx 2026-10-1163 ENUMLFI 2026-08-1064 FLOWMost Used Commands 2026-07-1865 ADPERSIST1 — Active User Credential Theft via Certificates 2026-08-1066 ADPERSIST2 — Machine Account Persistence via Certificates 2026-08-1067 ADPERSIST3 — Account Persistence via Certificate Renewal 2026-08-1068 WEBPhishing Site & Link Identification 2026-08-1069 NIXRDP 2026-08-1070 ADRustHound-CE 2026-09-1371 ADShadow Credentials — msDS-KeyCredentialLink Abuse 2026-08-1072 ADSharpHound 2026-10-1273 TOOLsponge 2026-08-1074 ADTHEFT1 — Exporting Certificates and Keys 2026-08-1075 ADTHEFT2 — User Certificate Theft via DPAPI 2026-08-1076 ADTHEFT3 — Machine Certificate Theft via DPAPI 2026-08-1077 ADTHEFT4 — Finding Certificate Files 2026-08-1078 ADTHEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10