01 ADAttack #12 — Silver Ticket Attack 2026-08-1002 ADAttack #33 — ESC8 NTLM Relay to ADCS HTTP Endpoint 2026-08-1003 ADAttack #34 — ESC11 NTLM Relay to ADCS RPC 2026-08-1004 ADAttack #4 — Pass-the-Hash (PtH) 2026-08-1005 ADAttack #41 — PetitPotam (CVE-2021-36942) 2026-08-1006 ADAttack #42 — PrinterBug SpoolSample 2026-08-1007 ADAttack #5 — Pass-the-Ticket (PtT) 2026-08-1008 ADAttack #6 — Overpass-the-Hash (Pass-the-Key) 2026-08-1009 ADAttack #62 — DSRM Backdoor Abuse 2026-08-1010 ADAttack #7 — NTLM Relay Attacks 2026-08-1011 ADAttack #73 — gMSA Password Extraction 2026-08-1012 ADAttack #77 — DFSCoerce MS-DFSNM Coercion 2026-08-1013 ADAttack #8 — LLMNR NBT-NS mDNS Poisoning 2026-08-1014 ADAttack #9 — mitm6 (IPv6 DNS Spoofing DHCPv6 Takeover) 2026-08-1015 ADESC11 — NTLM Relay to ADCS RPC (ICPR) 2026-08-1016 ADESC8 — NTLM Relay to ADCS HTTP Web Enrollment 2026-08-1017 TOOLNTLM & Kerberos Relay 2026-08-0918 TOOLpcap-credential-extraction 2026-08-1019 ADShadow Credentials — msDS-KeyCredentialLink Abuse 2026-08-1020 ENUMSMTP User Enumeration 2026-09-2521 ADTHEFT5 — NTLM Theft via PKINIT (UnPAC-the-Hash) 2026-08-10

☧ CPTS · ordered posts

Locked

Unlock with your Main_Key through local GPG.

Start the local GPG helper

In your cheatsheet checkout, run:

npm run unlock:helper

Open the link it prints, or paste its pairing code below. Keep the terminal open until GPG finishes.

Import an index you already decrypted

Download the encrypted index, then decrypt with GPG:

gpg --output report-index.json --decrypt report-index.gpg

Your private key stays in GPG. The decrypted index is saved in this browser so you can reopen it after navigation, refreshes and restarts. Lock this browser or clear this site's browser data to remove the saved index. Nothing is uploaded.