domains / families / devops / windows-ad

windows-ad

authentic

Authorized Active Directory and Windows identity attacks: Kerberos abuse, AD CS escalation, BloodHound path analysis, NTLM relay, and domain privilege-escalation research.

When to use

• Mapping and attacking AD trust paths in an authorized engagement.
• Researching escalation routes (AD CS, Kerberos delegation) in labs.

When not to use

• Domain attacks can destabilize production AD; stage in labs first.
• Relay attacks need signing-disabled targets; modern defaults block many paths.

Skill page

Source