Active-Directories

In-depth explanation of the msDS-KeyCredentialLink attribute used in a shadow credentials attack, and how to parse it.

We will see a few common queries to find useful information in LDAP during a Windows Active Directory pentest.

Enumerating Active Directory sites and subnets is an important part of the enumeration phase. We will see how to extract them from Windows and linux.

Group Policy Preferences (GPP) can be very dangerous if they are used to store passwords. To quickly find these in a pentest, we made a tool with Shutdown that crawls and extracts these passwords from Windows shares !