#activedirectory #video #playlist #offensive #summary

Пост про атаки на AD. Собираю информацию здесь:

Видео:
[*] Очень полезный плейлист с базовыми атаками на Active Directory
[*] Другой взгляд атакующего на ACL в AD, Павел Шлюндин
[*] Сетевые атаки. Спуффинг. MITM. Relay.
[*] Керберос. Использования аутентификационных протоколов Windows в тестировании на проникновении.
[*] Базовые атаки на AD
[*] AD. Яндекс

Статьи:
[*] Habr: Атаки на домен
[*] Habr: Продвинутые атаки на домен
[*] Kerberoasting. Kerberos ticket. Getting Passwords From Kerberos Pre-Authentication Packets
[*] Habr. Kerberoasting v2
[*] Infosecmatter: Top 16 Active Directory Vulnerabilities
[*] SecureAuth: Impacket
[*] IFCR: Active Directory Certificate Services
[*] Nettitude: WSUS
[*] Trusts: Guided atacks on trust
[*] LuemmelSec: Relaying 101
[*] Ardent101. Bloodhound
[*] Wald0: GPO Abuse

Райтапы на AD тачки
[*] https://grimmie.net/cyberseclabs-zero-write-up/
[*] https://grimmie.net/cyberseclabs-secret-write-up/
[*] https://grimmie.net/cyberseclabs-toast-write-up/

Инструменты:
[*] BloodHound: BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory environment. (yay -S bloodhound)
[*] python-bloodhound: used to get network information (pip3 install bloodhound)
[*] Responder: Responder is a LLMNR, NBT-NS and MDNS poisoner, with built-in HTTP/SMB/MSSQL/FTP/LDAP rogue authentication server supporting NTLMv1/NTLMv2/LMv2, Extended Security NTLMSSP and Basic HTTP authentication.
[*] Crackmapexec: A swiss army knife for pentesting networks
[*] ldap_shell: AD ACL abuse
[*] certipy: Tool for Active Directory Certificate Services enumeration and abuse
[*] DonPapi: Dumping DPAPI credz remotely

THM Лабы:

1. https://tryhackme.com/room/attacktivedirectory
2. https://tryhackme.com/room/winadbasics
3. https://tryhackme.com/room/postexploit
4. https://tryhackme.com/room/breachingad
5. https://tryhackme.com/room/adenumeration
6. https://tryhackme.com/room/enterprise

Читшиты:
[*] ze1to0: Attacking_ad
[*] Iredteam: AD Kerberos Abuse
[*] OrangeSec: AD Pentest MindMAP (sic!)
[*] SnovvCrash: AD wiki


Презенташки:
[*] Fun with LDAP and Kerberos* in AD environments
[*] Offensive Active Directory 101

Сайт:
[*] Целый сайт про AD Security
[*] Блог о компьютерной безопасности

Книжки:
1. "Active Directory Глазами Хакера". Вполне неплохо для новичка. Описаны основные атаки и инструменты.

Пост будет дополняться

#recomendation #info #summary

Не реклама. Авторская подборка телеграм каналов и чатов по инфосек тематике. Читаю их все по мере поступления новой инфы. Решил поделиться блогами коллег. Думаю, найдете для себя что-то интересное :)

https://t.me/pathsecure *
https://t.me/ap_security
https://t.me/appsexnotes
https://t.me/ArroizX_Notes
https://t.me/android_guards_today
https://t.me/androidMalware
https://t.me/alarm_vali
https://t.me/alexmakus
https://t.me/alexredsec
https://t.me/AlienHardware
https://t.me/api_0 *
https://t.me/api_00
https://t.me/appsec_job
https://t.me/APT_Notes *
https://t.me/avdno
https://t.me/avleonovrus
https://t.me/beaverdreamer
https://t.me/bureaucraticsecurity *
https://t.me/BugBountyPLZ
https://t.me/bugbeer
https://t.me/bughuntertips *
https://t.me/bughunter_circuit
https://t.me/bughunter_omsk
https://t.me/bbountykz
https://t.me/bh_cat
https://t.me/castercanal
https://t.me/CherepawwkaChannel
https://t.me/chtivvvo
https://t.me/critical_bug *
https://t.me/citsecurity
https://t.me/cryptooffensive *
https://t.me/cyb3r53cr3t5 *
https://t.me/CyberSecurityTechnologies *
https://t.me/cybersecurity_for_all
https://t.me/cybersecurity_memes_off
https://t.me/cybred
https://t.me/CyberR3bel
https://t.me/cloud_sec *
https://t.me/darkfox_info
https://t.me/dbc_pentesting
https://t.me/dc7342
https://t.me/dc7495
https://t.me/defisec
https://t.me/deteact_rnd
https://t.me/dl_konserva
https://t.me/poxek
https://t.me/dotrubic
https://t.me/disasm_me_ch
https://t.me/dxe_0x0
https://t.me/Ent_TranslateIB
https://t.me/failauth
https://t.me/f10vv
https://t.me/gebutcher *
https://t.me/GigaHack
https://t.me/hacker_volodya
https://t.me/hackerbiker
https://t.me/k3vg3n_ch
https://t.me/package_security
https://t.me/pentest_mentor
https://t.me/pentestnotes
https://t.me/purple_medved
https://t.me/hacker_frei
https://t.me/HackingForRamen
https://t.me/hashbin20
https://t.me/hahacking
https://t.me/HNews *
https://t.me/nwnotes
https://t.me/hybgl *
https://t.me/internal_pentest
https://t.me/InfoSec_and_Risk_Management
https://t.me/infobes
https://t.me/infosec1z
https://t.me/infosecmemes
https://t.me/InfoSecMemesProblemes *
https://t.me/justsecurity
https://t.me/k8security *
https://t.me/lamerZen
https://t.me/linkersec
https://t.me/malwarehunters
https://t.me/makrushind
https://t.me/markcda_blog
https://t.me/mavisgpt
https://t.me/m1swarr1or
https://t.me/mobile_appsec_world *
https://t.me/moseedo
https://t.me/monkey_hacker
https://t.me/myappsec
https://t.me/naryl_sec
https://t.me/naked_perimeter
https://t.me/ocherkbb
https://t.me/offensiveosint
https://t.me/pain_test
https://t.me/personal_oblivion
https://t.me/P0x3k
https://t.me/pigPeter *
https://t.me/pntests
https://t.me/ph4ntomsnotes
https://t.me/podium_palace
https://t.me/postImpact
https://t.me/ptswarm
https://t.me/puni_ne_hacker
https://t.me/pwnai
https://t.me/r1v3ns_life
https://t.me/RalfHackerChannel *
https://t.me/ra1jin_notes
https://t.me/RedTeambro *
https://t.me/redteamalerts
https://t.me/RedTeamFeed
https://t.me/redfoxsec
https://t.me/reworr_notes
https://t.me/reverse_dungeon
https://t.me/road_to_oscp
https://t.me/router_os *
https://t.me/sanspie_notes
https://t.me/SarSec
https://t.me/sec_devops *
https://t.me/secinfosec *
https://t.me/secinfosex
https://t.me/s3Ch1n7
https://t.me/secharvester
https://t.me/ShizoPrivacy
https://t.me/shybertchannel
https://t.me/ScriptKiddieNotes
https://t.me/skvortscov_bugbounty_vlog
https://t.me/slonser_notes
https://t.me/SidneyJobChannel
https://t.me/someSecurityNotes
https://t.me/s0i37_channel
https://t.me/system32_pentest
https://t.me/s3c4rch
https://t.me/technical_private_cat
https://t.me/tomhunter
https://t.me/TrickeryHub
https://t.me/true_sec *
https://t.me/unidataline *
https://t.me/v01dch4nn3l
https://t.me/w2hack *
https://t.me/webpwn *
https://t.me/wr3dmast3rvs
https://t.me/YouPentest
https://t.me/zema_notes





PS: Пишите в комменты другие интересные чаты и каналы - заценю :)