01 AD Active Directory Attack Methodology 2026-08-09 02 AD Attack #1 — Password Spraying 2026-08-10 03 AD Attack #11 — Golden Ticket Attack 2026-08-10 04 AD Attack #12 — Silver Ticket Attack 2026-08-10 05 AD Attack #13 — Diamond Ticket Attack 2026-08-10 06 AD Attack #14 — Sapphire Ticket Attack 2026-08-10 07 AD Attack #15 — Unconstrained Delegation Abuse 2026-08-10 08 AD Attack #16 — Constrained Delegation Abuse (S4U2Proxy) 2026-08-10 09 AD Attack #18 — Bronze Bit Attack (CVE-2020-17049) 2026-08-10 10 AD Attack #19 — GenericAll Abuse 2026-08-10 11 AD Attack #2 — Kerberoasting 2026-08-10 12 AD Attack #20 — GenericWrite Abuse 2026-08-10 13 AD Attack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-10 14 AD Attack #27 — ESC1 SAN Specification in Template 2026-08-10 15 AD Attack #3 — AS-REP Roasting 2026-08-10 16 AD Attack #35 — Golden Certificate Attack 2026-08-10 17 AD Attack #37 — DCSync Attack 2026-08-10 18 AD Attack #39 — NTDS.dit Extraction and Dumping 2026-08-10 19 AD Attack #42 — PrinterBug SpoolSample 2026-08-10 20 AD Attack #44 — noPAC Sam-the-Admin (CVE-2021-42278 42287) 2026-08-10 21 AD Attack #5 — Pass-the-Ticket (PtT) 2026-08-10 22 AD Attack #50 — Abusing Account Operators Group 2026-08-10 23 AD Attack #54 — PsExec Remote Execution via SMB 2026-08-10 24 AD Attack #58 — WMI Lateral Movement 2026-08-10 25 AD Attack #6 — Overpass-the-Hash (Pass-the-Key) 2026-08-10 26 AD Attack #64 — Golden Ticket Persistence 2026-08-10 27 AD Attack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-10 28 AD Attack #69 — Forest Trust Abuse Cross-Forest Ticket Forging 2026-08-10 29 AD Attack #7 — NTLM Relay Attacks 2026-08-10 30 FLOW Attacking Common Services — CPTS Cheat Sheet 2026-08-29 31 AD bloodhound-ce-python 2026-08-10 32 AD BloodHound-Python_ 2026-08-10 33 AD Certipy-ad 2026-08-10 34 AD ESC10 — Weak Certificate Mapping 2026-08-10 35 AD faketime 2026-08-10 36 AD Golden Certificate Attack — DPERSIST1 2026-08-10 37 AD Kerberoasting 2026-08-09 38 AD Kerberoasting — Local On-Host 2026-08-10 39 AD Kerbrute 2026-08-09 40 AD Mimikatz 2026-08-09 41 FLOW Most Used Commands 2026-07-18 42 TOOL NTLM & Kerberos Relay 2026-08-09 43 TOOL pcap-credential-extraction 2026-08-10 44 AD PERSIST2 — Machine Account Persistence via Certificates 2026-08-10 45 AD Rubeus 2026-08-09 46 AD RustHound-CE 2026-09-13 47 AD THEFT3 — Machine Certificate Theft via DPAPI 2026-08-10 48 AD THEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10