/explore
|
You are here 
|
zer1t0.gitlab.io | ||
| | | | |
0xdf.gitlab.io
Active was an example of an easy box that still provided a lot of opportunity to learn. The box was centered around common vulnerabilities associated with Active Directory. There's a good chance to practice SMB enumeration. It also gives the opportunity to use Kerberoasting against a Windows Domain, which, if you're not a pentester, you may not have had the chance to do before. |
|
| | | | | ||
| | | | |
www.labofapenetrationtester.com
Home of Nikhil SamratAshok Mittal. Posts about Red Teaming, Offensive PowerShell, Active Directory and Pen Testing. |
|
| | | | | ||
| | | | |
blog.ikuamike.io
Introduction After passing my OSCP, I am planning on doing CRTP and CRTO sometime this year. I took the OSCP exam before the updates that are focused on Active Directory so I didn't actively focus on this area. So to learn and practice on AD and Windows and also as some prep for the certifications I plan on taking, I will be doing some machines that are AD related and try to get into the details of the included misconfigurations and vulnerabilities. |
|
| | | | | ||
| | | | |
www.hub.trimarcsecurity.com
IntroductionIf you've administered Active Directory (AD) for any significant time, chances are you've come across the primaryGroupID attribute. Originally developed as a method for AD to support POSIX-compliant applications, the attribute has been better known by a different name: An Attack Vector. Commonly referenced in a DCShadow attack, an adversary can set a user's primaryGroupID to 512 (Domain Admins) and effectively become a member of that group. One of the post important concepts to gras |
|
| | | |||
