# AD Enumerate

* AD Enumerate
* DNS Extraction
* Domain Privilege Escalation
* Access Token Manipulation
* Pass-The-Hash, Pass-The-Ticket
* Kerberoasting
* Silver Ticket, Golden Ticket, Skeleton Key
* AD Certificate Services
* Unconstrained and Constrained Delegation
* Coerced Authentication Using PrinterBug and PetitPotam
* Hopping the Trust
* LLMNR/NBNS/WPAD
* Bloodhound/SharpHound
* AD Explorer
* SMB Pipes, Remote Desktop Protocol, PsExec, Windows Management Instrumentation, dcom
* SMB Relay
* LLMNR/NBT-NS Poisoning and Relay
* Responder
* Setting Up Shadow Credentials
* Domain Privilege Abuse
* DC Sync
* Domain Lateral Movement, Domain Trust Attacks
* Pivoting Between Domains and Forests
* Forest Enumeration, Forest Attacks
* Obtaining the Objective and Reporting
* Action on Objectives
* Database Attacks
* SQL Abuse
* Trust Abuse
* PowerupSQL
* Target Manipulation
* Collection
* Data Staging
* Exfiltration
* Impact
* Emulating Ransomware
