active-directory-attacks

提供针对 Active Directory 的渗透测试与攻击技术指南。

帮你干完整个 Windows 域的渗透测试，从侦察、凭证收集到横向移动和域控接管都讲清楚，涵盖 Kerberoasting、DCSync、pass-the-hash、BloodHound、Golden/Silver Ticket、AS-REP、NTLM relay 这类常见手法。适合红队、渗透测试或安全评估时需要针对 Active Directory 弱点做深度验证的时候用。特别在于覆盖端到端流程和实战工具链，但只能在有授权的前提下使用。

# Active Directory Attacks

## Purpose

Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.

## Inputs/Prerequisites

- Kali Linux or Windows attack platform
- Domain user credentials (for most attacks)
- Network access to Domain Controller
- Tools: Impacket, Mimikatz, BloodHound, Rubeus, CrackMapExec

## Outputs/Deliverables

- Domain enumeration data
- Extracted credentials and hashes
- Kerberos tickets for impersonation
- Domain Administrator access
- Persistent access mechanisms

-