SPN Scanning - Stealthy Port Scanning

Use SPN Scanning to avoid detection and find where in a Kerberos network services live.…

Hot on the Trail of Domain Admin: Bloodhound Intro

BloodHound is a tool to analyze and understand Active Directory Trust Relationships. Utilize Bloodhound to find shortest path to Domain Admin.…

Extracting Hashes from NTDS.dit File

On internal pens, it's really common for me to get access to the Domain Controller and dump password hashes for all AD users.…