01 AD Active-Directory_cheat_sheet 2026-08-10 02 AD ADCS Attack Methodology 2026-08-09 03 AD Attack #1 — Password Spraying 2026-08-10 04 AD Attack #12 — Silver Ticket Attack 2026-08-10 05 AD Attack #13 — Diamond Ticket Attack 2026-08-10 06 AD Attack #15 — Unconstrained Delegation Abuse 2026-08-10 07 AD Attack #19 — GenericAll Abuse 2026-08-10 08 AD Attack #22 — WriteOwner Abuse 2026-08-10 09 AD Attack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-10 10 AD Attack #26 — AdminSDHolder Persistence via ACL 2026-08-10 11 AD Attack #27 — ESC1 SAN Specification in Template 2026-08-10 12 AD Attack #28 — ESC2 Any Purpose EKU No EKU 2026-08-10 13 AD Attack #29 — ESC3 Certificate Request Agent 2026-08-10 14 AD Attack #30 — ESC4 Template Write Permissions 2026-08-10 15 AD Attack #31 — ESC6 EDITF_ATTRIBUTESUBJECTALTNAME2 Flag 2026-08-10 16 AD Attack #32 — ESC7 Vulnerable CA Officer Permissions 2026-08-10 17 AD Attack #33 — ESC8 NTLM Relay to ADCS HTTP Endpoint 2026-08-10 18 AD Attack #34 — ESC11 NTLM Relay to ADCS RPC 2026-08-10 19 AD Attack #35 — Golden Certificate Attack 2026-08-10 20 AD Attack #36 — Certifried (CVE-2022-26923) 2026-08-10 21 AD Attack #41 — PetitPotam (CVE-2021-36942) 2026-08-10 22 AD Attack #42 — PrinterBug SpoolSample 2026-08-10 23 AD Attack #44 — noPAC Sam-the-Admin (CVE-2021-42278 42287) 2026-08-10 24 AD Attack #45 — Token Impersonation (SeImpersonatePrivilege) 2026-08-10 25 AD Attack #51 — Abusing Server Operators Group 2026-08-10 26 AD Attack #64 — Golden Ticket Persistence 2026-08-10 27 AD Attack #65 — ACL Backdooring (Persistence via DCSync ACE) 2026-08-10 28 AD Attack #67 — ADCS Certificate-Based Persistence 2026-08-10 29 AD Attack #70 — ADCS Cross-Domain Enrollment 2026-08-10 30 AD Attack #76 — MSSQL Server and Linked Server Abuse 2026-08-10 31 AD Attack #77 — DFSCoerce MS-DFSNM Coercion 2026-08-10 32 FLOW Attack Flow Guide 2026-07-18 33 WEB Blind XSS Tool - ezXSS 2026-08-10 34 AD Certificate Persistence — Certifried (CVE-2022-26923) 2026-08-10 35 AD Certipy 2026-08-09 36 AD Certipy-ad 2026-08-10 37 TOOL dd tool 2026-08-10 38 AD DPERSIST2 — Rogue CA Certificate (NTAuth Injection) 2026-08-10 39 AD DPERSIST3 — Malicious Misconfiguration (ACL Backdoor) 2026-08-10 40 AD ESC1 — SAN Specification in Template 2026-08-10 41 AD ESC10 — Weak Certificate Mapping 2026-08-10 42 AD ESC11 — NTLM Relay to ADCS RPC (ICPR) 2026-08-10 43 AD ESC12 — Shell Access to CA with YubiHSM 2026-08-10 44 AD ESC13 — Issuance Policy OID Group Link 2026-08-10 45 AD ESC14 — Weak Explicit Certificate Mapping 2026-08-10 46 AD ESC15 — EKUwu (CVE-2024-49019) 2026-08-10 47 AD ESC16 — Security Extension Disabled on CA (Globally) 2026-08-10 48 AD ESC17 — ADCS Certificate Spoofing to Attack HTTPS-Enabled WSUS Clients 2026-08-10 49 AD ESC2 — Any Purpose EKU No EKU (The Swiss Certificate) 2026-08-10 50 AD ESC3 — Misconfigured Enrollment Agent Templates 2026-08-10 51 AD ESC4 — Vulnerable Certificate Template Access Control 2026-08-10 52 AD ESC5 — Vulnerable PKI Object Access Control 2026-08-10 53 AD ESC6 — EDITF_ATTRIBUTESUBJECTALTNAME2 Flag 2026-08-10 54 AD ESC7 — Vulnerable CA Access Control (ManageCA ManageCertificates) 2026-08-10 55 AD ESC8 — NTLM Relay to ADCS HTTP Web Enrollment 2026-08-10 56 AD ESC9 — No Security Extension (Template-Level) 2026-08-10 57 GIT Git — Complete Branch & Vault Management Guide 2026-08-10 58 AD Golden Certificate Attack — DPERSIST1 2026-08-10 59 FLOW HTB Attack Flow Playbook 2026-08-27 60 TOOL Internet Archival Guide 2026-08-10 61 ENUM LFI 2026-08-10 62 FLOW Most Used Commands 2026-07-18 63 AD PERSIST1 — Active User Credential Theft via Certificates 2026-08-10 64 AD PERSIST2 — Machine Account Persistence via Certificates 2026-08-10 65 AD PERSIST3 — Account Persistence via Certificate Renewal 2026-08-10 66 WEB Phishing Site & Link Identification 2026-08-10 67 NIX RDP 2026-08-10 68 AD RustHound-CE 2026-09-13 69 AD Shadow Credentials — msDS-KeyCredentialLink Abuse 2026-08-10 70 AD SharpHound_ 2026-08-10 71 TOOL sponge 2026-08-10 72 AD THEFT1 — Exporting Certificates and Keys 2026-08-10 73 AD THEFT2 — User Certificate Theft via DPAPI 2026-08-10 74 AD THEFT3 — Machine Certificate Theft via DPAPI 2026-08-10 75 AD THEFT4 — Finding Certificate Files 2026-08-10 76 AD THEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10