TamaGorengs Notes
  • 👨‍💻Whoami
  • 🗺️Active Directory
    • Active Directory Enumeration
    • AD Reconnaissance
      • LDAP
    • Movement
      • Kerberos
        • ASREProast
        • Pass The Hash
        • Pass The Ticket
        • Overpass The Hash
      • Credential
        • Dumping
          • DCSync
      • WMI and WinRM
  • 🪟Windows
    • Windows Privilege Escalation
      • WinPrivEsc Enumeration
      • Leveraging Windows Services
      • Abusing Other Windows Components
    • RDP
  • 🐧Linux
    • Linux Privilege Escalation
      • LinuxPrivEsc Enumeration
      • Exposed Confidential Information
      • Insecure File Permissions
      • Insecure System Components
  • 🕸️Web Application
    • SQL Injection
  • Group 1
    • Client-Side Attacks
      • Windows Library Files
      • Exploiting Microsoft Office
Powered by GitBook
On this page
  • Manual Enumeration
  • Legacy Windows Tools
  • Automated Enumeration
  • Bloodhound

Was this helpful?

  1. Active Directory

Active Directory Enumeration

Manual Enumeration

Legacy Windows Tools

net user /domain
net user jeffadmin /domain
net group /domain
net group "Sales Department" /domain

Using PowerShell and .NET Classes

Automated Enumeration

Bloodhound

Bloodhound-python

SharpHound

PreviousWhoamiNextAD Reconnaissance

Last updated 2 months ago

Was this helpful?

🗺️