Tag: NTLM Relay

All the articles with the tag "NTLM Relay".

• ShadowGate — HackSmarter Pro Labs

  21 Sep, 2026

  ShadowGate writeup (HackSmarter Pro Labs): anonymous AD enumeration, AS-REP Roasting, Shadow Credentials with Certipy, ESC8 and DCSync.

• Active Directory Certificate Services: Abusing ADCS ESC11 (RPC Relay)

  28 Jun, 2026

  Exploitation of ADCS ESC11 through unencrypted RPC ICertPassage interfaces via NTLM relaying to compromise Active Directory environments.

• Active Directory Certificate Services: Abusing ADCS ESC8 (NTLM Relay)

  9 Jun, 2026

  Step-by-step walkthrough of ADCS ESC8 exploitation over HTTP Web Enrollment using NTLM Relay for full Active Directory domain escalation.