Active Directory attack methodology for internal network red team engagements. Covers reconnaissance (BloodHound, PowerView, ADExplorer), credential abuse (Kerberoasting, ASREProasting, NTLM relay, LLMNR/NBT-NS poisoning), privilege escalation (ACL abuse, GPO abuse, unconstrained/constrained delegation), lateral movement (Pass-the-Hash, Pass-the-Ticket, Overpass-the-Hash, WMI/WinRM/PsExec), persistence (Golden/Silver/Diamond Tickets, DCSync, DCShadow, AdminSDHolder, Skeleton Key), forest trust a
Install
KitScout test notes
Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.
Similar tools
- cloud-penetration-testing 49,642 ★
Conduct comprehensive security assessments of cloud infrastructure across Microsoft Azure, Amazon Web Services - ethical-hacking-methodology 49,642 ★
Master the complete penetration testing lifecycle from reconnaissance through reporting. This skill covers the - linux-privilege-escalation 49,642 ★
Execute systematic privilege escalation assessments on Linux systems to identify and exploit misconfigurations - memory-forensics 42,470 ★
Master memory forensics techniques including memory acquisition, process analysis, and artifact extraction usi - mtls-configuration 42,470 ★
Configure mutual TLS (mTLS) for zero-trust service-to-service communication. Use when implementing zero-trust