Tag: Active Directory

All the articles with the tag "Active Directory".

• Active Directory Certificate Services: Abusing ADCS ESC8 (Kerberos Relay)

  30 Jun, 2026

  Deep dive into exploiting ADCS ESC8 via Kerberos Relay using KrbRelay to obtain domain controller certificates and achieve domain takeover.

• Active Directory Certificate Services: Abusing ADCS ESC11 (RPC Relay)

  28 Jun, 2026

  Exploitation of ADCS ESC11 through unencrypted RPC ICertPassage interfaces via NTLM relaying to compromise Active Directory environments.

• Active Directory Certificate Services: Abusing ADCS ESC8 (NTLM Relay)

  9 Jun, 2026

  Step-by-step walkthrough of ADCS ESC8 exploitation over HTTP Web Enrollment using NTLM Relay for full Active Directory domain escalation.

• Active Directory Domain Trust: Abusing Child-to-Parent Trust

  8 Jun, 2026

  Privilege escalation across Active Directory trust boundaries: abusing Child-to-Parent trusts within the same forest to compromise the root domain.

• My Experience with the CRTP - 2026

  13 Mar, 2026

  My journey, preparation strategy, lab experiences, and tips for successfully passing the Altered Security Certified Red Team Professional (CRTP) exam.