2.1 KiB
2.1 KiB
https://whimsical.com/active-directory-YJFeAhW9GMtmLX4SWxKCCM (Follow Mind map for nodes)
Quick links
- Initial access: Windows/Active Directory for OSCP/Initial Access/Scan Network, Windows/Active Directory for OSCP/Initial Access/Get User List, Windows/Active Directory for OSCP/Initial Access/LDAP Search, Windows/Active Directory for OSCP/Initial Access/SMB Shares
- Enumeration: Windows/Active Directory for OSCP/Enumeration, Windows/Active Directory for OSCP/Enumeration/net cmd, Windows/Active Directory for OSCP/Enumeration/PowerView Enumeration, Windows/Active Directory for OSCP/Enumeration/script
- Low hanging fruit: Windows/Active Directory for OSCP/Low Hanging Fruit/Null Login, Windows/Active Directory for OSCP/Low Hanging Fruit/Group Policy in SYSVOL
- Valid credentials handling: Windows/Active Directory for OSCP/Valid Credentials/CrackHash, Windows/Active Directory for OSCP/Valid Credentials/Kerberoasting, Windows/Active Directory for OSCP/Valid Credentials/Runas (Invoke-RunasCs), Windows/Active Directory for OSCP/Valid Credentials/BloodHound
- Usernames without passwords: Windows/Active Directory for OSCP/We have User Name but no Password/Password Spray, Windows/Active Directory for OSCP/We have User Name but no Password/ASREP Roast
- Lateral movement: Windows/Active Directory for OSCP/Lateral Movement/RDP, Windows/Active Directory for OSCP/Lateral Movement/Win-RM, Windows/Active Directory for OSCP/Lateral Movement/Pass-The-Hash [psexec, impacket, CME], Windows/Active Directory for OSCP/Lateral Movement/DCOM, Windows/Active Directory for OSCP/Lateral Movement/Credential SAM dumping, Windows/Active Directory for OSCP/Lateral Movement/Interactive Shell, Windows/Active Directory for OSCP/Lateral Movement/Pseudo-Shell
- Credential dumping and data handling: Windows/Active Directory for OSCP/Mimikatz, Windows/Active Directory for OSCP/NTDS.dir cracking with SYSTEM, Windows/Active Directory for OSCP/Permission Move/DC Sync