# Active Directory

- [Recon](https://blog.hacktive.bebzounette.com/active-directory/untitled.md)
- [TCP/UDP](https://blog.hacktive.bebzounette.com/active-directory/untitled/tcp-udp.md)
- [DNS](https://blog.hacktive.bebzounette.com/active-directory/untitled/dns.md)
- [NetBIOS](https://blog.hacktive.bebzounette.com/active-directory/untitled/netbios.md)
- [RPC](https://blog.hacktive.bebzounette.com/active-directory/untitled/rpc.md)
- [LDAP](https://blog.hacktive.bebzounette.com/active-directory/untitled/ldap.md): Lightweight Directory Access Protocol (LDAP) holds a pivotal role for authentication and retrieving information, especially within Microsoft's Active Directory.
- [HTTP](https://blog.hacktive.bebzounette.com/active-directory/untitled/http.md)
- [Responder](https://blog.hacktive.bebzounette.com/active-directory/untitled/responder.md)
- [ADRecon](https://blog.hacktive.bebzounette.com/active-directory/untitled/adrecon.md)
- [BloodHound](https://blog.hacktive.bebzounette.com/active-directory/untitled/bloodhound.md)
- [Network Shares](https://blog.hacktive.bebzounette.com/active-directory/untitled/network-shares.md)
- [Password Policy](https://blog.hacktive.bebzounette.com/active-directory/untitled/password-policy.md)
- [Enumeration](https://blog.hacktive.bebzounette.com/active-directory/untitled/enumeration.md)
- [Domain](https://blog.hacktive.bebzounette.com/active-directory/untitled/enumeration/domain.md)
- [Powerview](https://blog.hacktive.bebzounette.com/active-directory/untitled/enumeration/powerview.md): AD Enumeration With PowerView/Pywerview
- [.NET Classes](https://blog.hacktive.bebzounette.com/active-directory/untitled/enumeration/.net-classes.md)
- [Lateral movement](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement.md)
- [Code execution](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution.md)
- [PSExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/psexec.md)
- [SMBExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/smbexec.md)
- [WMIexec / WMI](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/wmiexec-wmi.md)
- [ATExec / SchTaskExec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/atexec-schtaskexec.md)
- [DCOMExec / DCOM](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/dcomexec-dcom.md)
- [Powershell Remoting - WinRM](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/powershell-remoting-winrm.md)
- [Crackmapexec](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/crackmapexec.md)
- [Service Control (SC)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/code-execution/service-control-sc.md)
- [Credentials](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials.md)
- [Finding](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/finding.md)
- [Guessing](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/finding/guessing.md)
- [Bruteforce](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/finding/bruteforce.md)
- [Spraying](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/finding/spraying.md)
- [Dumping](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping.md)
- [SAM Base](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/sam-base.md)
- [LSA Secrets](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/lsa-secrets.md)
- [LSASS Process](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/lsass-process.md)
- [DPAPI secrets](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/dpapi-secrets.md)
- [NTDS.DIT](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/ntds.dit.md)
- [Group Policy Preferences](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/group-policy-preferences.md)
- [User description](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/dumping/user-description.md)
- [Impersonnification](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/impersonnification.md)
- [Cracking](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/credentials/cracking.md)
- [Coercition](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition.md)
- [MS-RPRN (PrinterBug)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition/ms-rprn-printerbug.md)
- [MS-EFSR (PetitPotam)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition/ms-efsr-petitpotam.md)
- [MS-DFSNM (DFSCoerce)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition/ms-dfsnm-dfscoerce.md)
- [MS-FSRVP (ShadowCoerce)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition/ms-fsrvp-shadowcoerce.md)
- [WebClient (WebDAV)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/coercition/webclient-webdav.md)
- [Relay](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/relay.md)
- [Kerberos](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos.md)
- [Kerberoasting](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/kerberoasting.md): Kerberos is the preferred authentication protocol in Active Directory networks for domain accounts.
- [AS-REP Roasting](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/as-rep-roasting.md)
- [Pass the Hash/Ticket](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/pass-the-hash-ticket.md)
- [MSSQL Trusted Links](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/mssql-trusted-links.md)
- [Forged Tickets](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/forged-tickets.md)
- [Delegations](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/delegations.md)
- [Unconstrained Delegation](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/delegations/unconstrained-delegation.md)
- [Constrained Delegation](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/delegations/constrained-delegation.md)
- [(RBCD) Resource-Based Constrained](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/kerberos/delegations/rbcd-resource-based-constrained.md)
- [GPOs](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/gpos.md)
- [DACL](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/dacl.md)
- [Certificates Service (AD-CS)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/certificates-service-ad-cs.md)
- [Privileged Groups](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/dns-admins.md)
- [DNS Admin](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/dns-admins/dns-admin.md)
- [Backup Operator](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/dns-admins/backup-operator.md)
- [Built-in Misconfigurations](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/built-in-misconfigurations.md)
- [PASSWD\_NOTREQD](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/built-in-misconfigurations/passwd_notreqd.md)
- [DONT\_EXPIRE\_PASSWORD](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/built-in-misconfigurations/dont_expire_password.md)
- [MachineAccountQuota](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/built-in-misconfigurations/machineaccountquota.md)
- [LAPS](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/built-in-misconfigurations/laps.md)
- [CVEs](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/cves.md)
- [EternalBlue | MS17-010](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/cves/eternalblue-or-ms17-010.md)
- [Zerologon (CVE-2020-1472)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/cves/zerologon-cve-2020-1472.md)
- [SamTheAdmin (CVE-2021-42278)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/cves/samtheadmin-cve-2021-42278.md)
- [Certifried: (CVE-2022–26923)](https://blog.hacktive.bebzounette.com/active-directory/lateral-movement/cves/certifried-cve-2022-26923.md)
- [Persistance & Exfiltration](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration.md)
- [Golden Ticket](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/golden-ticket.md)
- [Silver Ticket](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/silver-ticket.md)
- [Skeleton Key](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/skeleton-key.md)
- [DSRM](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/dsrm.md)
- [Custom SSP](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/custom-ssp.md)
- [AdminSDHolder](https://blog.hacktive.bebzounette.com/active-directory/persistance-et-exfiltration/adminsdholder.md)
- [Cross Trust Attack](https://blog.hacktive.bebzounette.com/active-directory/cross-trust-attack.md)
- [Across Domain](https://blog.hacktive.bebzounette.com/active-directory/cross-trust-attack/across-domain.md)
- [Across Forest](https://blog.hacktive.bebzounette.com/active-directory/cross-trust-attack/across-forest.md)
- [References](https://blog.hacktive.bebzounette.com/active-directory/references.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://blog.hacktive.bebzounette.com/active-directory.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.