bloodyAD
Active Directory privilege escalation swiss-army knife. Quick reference for common bloodyAD operations.
RBCD
NetExec Advanced
Follow-up to the NetExec cheatsheet: deeper Active Directory abuse techniques, delegation attacks, and operational tooling for experienced operators.
HTB: Heron
Heron is a small Active Directory scenario that involves typical vulnerabilities found in real word company environments. It's designed for penetration testers …
ERTLabs: Calipendula
Calipendula is a hybrid GCP and Active Directory breach scenario, pushing you through cloud IAM enumeration, service account chaining, RBCD relay attacks, …
VULNLAB: Phantom
Phantom is a medium-difficulty Windows AD exploitation machine. The foothold involves discovering a publicly accessible SMB share, cracking a VeraCrypt …
VULNLAB: Ifrit
Ifrit is an Assumed-Breach scenario with the main objective is getting domain administrator privileges in the ifrit.vl Domain. It designed for those with …
VULNLAB: Heron
Heron is a medium-difficulty chain hosted on Vulnlab, featuring an assumed breach from a domain-joined linux jump server access to domain controller. Starting …
VULNLAB: Push
Push is a Hard-rated small Windows Active Directory chain featuring a one domain controller and one member server. This chain focuses on advanced attack …
VULNLAB: Reflection
Reflection is a medium-difficulty Active Directory chain that simulates a vulnerable enterprise environment and challenges users to progress from limited access …
VULNLAB: Bruno
Bruno is a medium-rated Windows domain box that chains insecure application configuration and weak Active Directory hygiene to go from no access to domain …
No posts match this tag.