Abuse ACL access over groups
Use access rights over a group to add users
Tag: Lateral Movement
Abuse ACL Access over User
Use access rights over a user to take over that user account.
Categories:
ACL Abuse
Abuse of ACL access rights to achieve lateral movement
Categories:
AD CS
Abuse Active Directory Certificate Service to achieve lateral movement and total domain compromise.
Categories:
ASREProasting
Take advantage of users with no Kerberos pre-authentication requirements and recover their password
Categories:
ESC1 and ESC2
Request certificate as another user with enrollee-supplied subject
Categories:
ESC3
Request certificate on behalf of another user with a enrollment agent certificate
Categories:
ESC4
Leverage vulnerable certificate access control to escalate privileges.
Categories:
Group Managed Service Account
Read the NT password hash of Group Managed Service Accounts (gMSA)
Categories:
Kerberoasting
The classic AD privilege escalation technique to crack the passwords of service accounts offline
Categories:
Kerberos
Abusing the ticket-based authentication and authorization protocol that governs the operation of Active Directory
Categories:
Lateral Movement and Privilege Escalation
Move from account to account, service to service, and machine to machine while escalating your privileges until you compromise the domain.
Categories:
Silver Ticket
Impersonate any user to a service by crafting service tickets