01 ADActive Directory Attack Methodology 2026-08-0902 ADAttack #1 — Password Spraying 2026-08-1003 ADAttack #11 — Golden Ticket Attack 2026-08-1004 ADAttack #12 — Silver Ticket Attack 2026-08-1005 ADAttack #13 — Diamond Ticket Attack 2026-08-1006 ADAttack #14 — Sapphire Ticket Attack 2026-08-1007 ADAttack #15 — Unconstrained Delegation Abuse 2026-08-1008 ADAttack #16 — Constrained Delegation Abuse (S4U2Proxy) 2026-08-1009 ADAttack #18 — Bronze Bit Attack (CVE-2020-17049) 2026-08-1010 ADAttack #19 — GenericAll Abuse 2026-08-1011 ADAttack #2 — Kerberoasting 2026-08-1012 ADAttack #20 — GenericWrite Abuse 2026-08-1013 ADAttack #25 — Shadow Credentials Attack (msDS-KeyCredentialLink) 2026-08-1014 ADAttack #27 — ESC1 SAN Specification in Template 2026-08-1015 ADAttack #3 — AS-REP Roasting 2026-08-1016 ADAttack #35 — Golden Certificate Attack 2026-08-1017 ADAttack #37 — DCSync Attack 2026-08-1018 ADAttack #39 — NTDS.dit Extraction and Dumping 2026-08-1019 ADAttack #42 — PrinterBug SpoolSample 2026-08-1020 ADAttack #44 — noPAC Sam-the-Admin (CVE-2021-42278 42287) 2026-08-1021 ADAttack #5 — Pass-the-Ticket (PtT) 2026-08-1022 ADAttack #50 — Abusing Account Operators Group 2026-08-1023 ADAttack #54 — PsExec Remote Execution via SMB 2026-08-1024 ADAttack #58 — WMI Lateral Movement 2026-08-1025 ADAttack #6 — Overpass-the-Hash (Pass-the-Key) 2026-08-1026 ADAttack #64 — Golden Ticket Persistence 2026-08-1027 ADAttack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-1028 ADAttack #69 — Forest Trust Abuse Cross-Forest Ticket Forging 2026-08-1029 ADAttack #7 — NTLM Relay Attacks 2026-08-1030 ADbloodhound-ce-python 2026-08-1031 ADBloodHound-Python_ 2026-08-1032 ADCertipy-ad 2026-08-1033 ADESC10 — Weak Certificate Mapping 2026-08-1034 ADEvil-WinRM & evil-winrm-py 2026-10-1235 ADfaketime 2026-08-1036 ADGolden Certificate Attack — DPERSIST1 2026-08-1037 ADKerberoasting 2026-08-0938 ADKerberoasting — Local On-Host 2026-08-1039 ADKerbrute 2026-08-0940 ADMimikatz 2026-08-0941 FLOWMost Used Commands 2026-07-1842 TOOLNTLM & Kerberos Relay 2026-08-0943 TOOLpcap-credential-extraction 2026-08-1044 ADPERSIST2 — Machine Account Persistence via Certificates 2026-08-1045 TOOLrlwrap, sshpass, ntpdate & faketime 2026-10-1246 ADRubeus 2026-10-1247 ADRun as Another User from an Evil-WinRM Session 2026-09-2548 ADRustHound-CE 2026-09-1349 ENUMsmbclient & smbclient.py 2026-10-1250 ADTHEFT3 — Machine Certificate Theft via DPAPI 2026-08-1051 ADTHEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.