AD Objects & Schema
Active Directory is a database of objects. Every user, computer, group, OU, and GPO is an object with a class and attributes. Unde…
Active Directory → Fundamentals
Active Directory is a database of objects. Every user, computer, group, OU, and GPO is an object with a class and attributes. Unde…
Active Directory doesn't just use DNS — it IS DNS. DC locator queries are SRV-based, Kerberos requires DNS, replication uses hostn…
Group Policy is how Windows domains enforce configuration on every machine and user. It is also one of the most abused attack prim…
Before attacking or defending Active Directory, you need the map: forests as security boundaries, domains as management units, tru…
NTLM and Kerberos are the two authentication protocols that run everything in Active Directory. Every lateral movement technique, …
Every Kerberos attack with full commands: enumeration (kerbrute/BloodHound), AS-REP roasting, Kerberoasting (targeted+OPSEC), Pass…
Deep dive into Active Directory attack techniques — Kerberoasting, AS-REP Roasting, Pass-the-Hash, DCSync, Golden Tickets and Bloo…