Reading List

Powersploit Documents page :

PowerSploit

Kerberos :

Kerberos in Active Directory

winrs :

winrs

Kerberos & Kerberoasting & Golden/Silver Tickets :

Kerberos Authentication Protocol - Active Directory Windows Server 2008

Kerberoasting :

Kerberoasting

LAPS :

https://docs.microsoft.com/en-us/previous-versions/mt227395(v=msdn.10)?redirectedfrom=MSDN

What is Microsoft LAPS? | Local Administrator Password Solution | Manage Local Admin Passwords

List of SPNs and their functionality :

SPNs

Kerberos Delegation :

Kerberos Delegation

SID History and SID Filtering :

SID History and SID Filtering - Active Directory Windows Server 2008

SID Filtering during AD Migrations - Active Directory FAQ

Group Policy :

Group Policy Architecture - Active Directory Windows Server 2008

Group Policy Architecture

Access Control List :

Access Control (Authorization) - Win32 apps

Active Directory Permissions : Security Descriptors

Access Control Entries

Security Principals :

Security Principals (Windows 10) - Microsoft 365 Security

PSexec :

PsExec - Windows Sysinternals

Attack Defense & Detection :

Attack Defense & Detection

runas :

Runas

xcopy :

https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/xcopy

Database links

SQL Server - Link... Link... Link... and Shell: How to Hack Database Links in SQL Server!

sp_configure :

sp_configure (Transact-SQL) - SQL Server

Active Directory Security Groups :

Active Directory Security Groups (Windows 10) - Microsoft 365 Security

bitsadmin :

BITSAdmin tool - Win32 apps

PowerView README file :

PowerShellMafia/PowerSploit

AMSI :

How AMSI helps you defend against malware - Win32 apps

Antimalware Scan Interface reference - Win32 apps

Hunting for AMSI bypasses - F-Secure Blog

Mimikatz :

gentilkiwi/mimikatz

Mimikatz

BloodHound :

BloodHound: Six Degrees of Domain Admin - BloodHound 3.0.3 documentation

Rubeus :

GhostPack/Rubeus

MSSQL :

How-to make yourself a SYSADMIN on Microsoft SQL Server | News | Monin

SofianeHamlaoui/Pentest-Notes

Hacking SQL Server Stored Procedures - Part 1: (un)Trustworthy Databases

Microsoft SQL Server

1433 - Pentesting MSSQL - Microsoft SQL Server

MSSQL

Last updated

Was this helpful?