01 ADActive-Directory_cheat_sheet 2026-08-1002 ENUMAnonymous Null Testing 2026-08-1003 ADAttack #1 — Password Spraying 2026-08-1004 ADAttack #11 — Golden Ticket Attack 2026-08-1005 ADAttack #13 — Diamond Ticket Attack 2026-08-1006 ADAttack #14 — Sapphire Ticket Attack 2026-08-1007 ADAttack #19 — GenericAll Abuse 2026-08-1008 ADAttack #2 — Kerberoasting 2026-08-1009 ADAttack #21 — WriteDACL Abuse 2026-08-1010 ADAttack #23 — ForceChangePassword Abuse 2026-08-1011 ADAttack #27 — ESC1 SAN Specification in Template 2026-08-1012 ADAttack #28 — ESC2 Any Purpose EKU No EKU 2026-08-1013 ADAttack #29 — ESC3 Certificate Request Agent 2026-08-1014 ADAttack #30 — ESC4 Template Write Permissions 2026-08-1015 ADAttack #32 — ESC7 Vulnerable CA Officer Permissions 2026-08-1016 ADAttack #43 — PrintNightmare (CVE-2021-34527) 2026-08-1017 ADAttack #44 — noPAC Sam-the-Admin (CVE-2021-42278 42287) 2026-08-1018 ADAttack #45 — Token Impersonation (SeImpersonatePrivilege) 2026-08-1019 ADAttack #49 — Abusing Backup Operators Group 2026-08-1020 ADAttack #52 — Abusing Print Operators Group 2026-08-1021 ADAttack #54 — PsExec Remote Execution via SMB 2026-08-1022 ADAttack #60 — Token Stealing and Impersonation 2026-08-1023 ADAttack #61 — Skeleton Key Attack 2026-08-1024 ADAttack #62 — DSRM Backdoor Abuse 2026-08-1025 ADAttack #63 — SID History Injection 2026-08-1026 ADAttack #68 — Cross-Domain Trust Abuse (SID History) 2026-08-1027 ADAttack #71 — PAM Trust Abuse (Bastion Forest) 2026-08-1028 ADAttack #73 — gMSA Password Extraction 2026-08-1029 ADAttack #74 — Azure AD Connect Credential Extraction 2026-08-1030 ADAttack #76 — MSSQL Server and Linked Server Abuse 2026-08-1031 ADAttack #78 — AD Recycle Bin Object Abuse 2026-08-1032 ADCertificate Persistence — Certifried (CVE-2022-26923) 2026-08-1033 ADDPERSIST3 — Malicious Misconfiguration (ACL Backdoor) 2026-08-1034 ADESC1 — SAN Specification in Template 2026-08-1035 ADESC13 — Issuance Policy OID Group Link 2026-08-1036 ADESC14 — Weak Explicit Certificate Mapping 2026-08-1037 ADESC17 — ADCS Certificate Spoofing to Attack HTTPS-Enabled WSUS Clients 2026-08-1038 ADESC3 — Misconfigured Enrollment Agent Templates 2026-08-1039 ADESC4 — Vulnerable Certificate Template Access Control 2026-08-1040 NIXFind Command 2026-08-1041 ADGolden Certificate Attack — DPERSIST1 2026-08-1042 FLOWHTB Attack Flow Playbook 2026-08-2743 PRIVLinux Privilege Escalation 2026-08-0944 FLOWMost Used Commands 2026-07-1845 FLOWPentesting: How Attacks Work 2026-10-1146 FLOWPotato Attacks — SeImpersonate to SYSTEM 2026-09-1747 ADPowerView and PowerUp Deep-Dive 2026-09-1948 ADSharpHound 2026-10-1249 ENUMshowmount & mount 2026-10-1250 ADTHEFT3 — Machine Certificate Theft via DPAPI 2026-08-1051 ENUMWindows Enumeration 2026-08-1052 PRIVWindows Privilege Escalation 2026-09-17