Roast in the Middle

A guide to help people who are new to penetration testing and are looking to gain an overview of the penetration testing process. This guide will help anyone hoping to take the CREST CRT or Offensive Security's OSCP exam and will aim to cover each stage of compromising a host.

This is CheatSheet which I used on PJPT exam to fully compromise Domain Controller by doing internal network penentration testing.

Kerberos Attacks, obtaining password hashes. EXECTRINITY focuses on the acquisition of TGS, specifically services operating under accounts in Active Directory.

Kerberoasting ( Kerberos Attacks ). From networks or Domain controller log perspective, since 𝗖𝗿𝗮𝗰𝗞𝗲𝗿𝗕𝗹𝗶𝘁𝘇 implements many parts of the normal Kerberos protocol, the main detection method involves the use of rc4_hmac in Kerberos exchanges.

Three headed dog, Kerberos Attacks. Cracking the system or router that provides a gateway for Active Directory.

Example of Kerberoasting Honeypot

Combining 'authentication' and 'grilling' to convey. Active directory ( trust attack ). performing an advance Kerberos attack may result in user accounts being suspended. Therefore, the attackers should be careful with this attack method

内网集权系统渗透测试笔记

Offensive tool for guessing Active Directory credentials via Kerberos

AD Authentication. Kerberos Attacks with ACL abuse capabilities. This CLI tool supports an attackers to perfrom a Kerberos Attacks and NTLM Relay Attacks

Kerberoasting and AS-REP Roasting

Kerberoasting

En este repositorio se encuentran los paso a paso para realizar algunos de los ataques más comunes en entorno de Active Directory. [En proceso...]

A tool written in Go to perform a few penetration testing techniques in the environment with Active Directory.