> For the complete documentation index, see [llms.txt](https://notes.qazeer.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://notes.qazeer.io/active-directory.md).

# Active Directory

- [Recon - Domain Recon](https://notes.qazeer.io/active-directory/recon-domain_recon.md)
- [Recon - AD scanners](https://notes.qazeer.io/active-directory/recon-ad_scanners.md)
- [Exploitation - NTLM capture and relay](https://notes.qazeer.io/active-directory/exploitation-ntlm_capture_and_relay.md)
- [Exploitation - Password spraying](https://notes.qazeer.io/active-directory/exploitation-password_spraying.md)
- [Exploitation - Domain Controllers CVE](https://notes.qazeer.io/active-directory/exploitation-dc_cve.md)
- [Exploitation - Kerberos AS\_REP roasting](https://notes.qazeer.io/active-directory/exploitation-kerberos_as_rep_roasting.md)
- [Exploitation - Credentials theft shuffling](https://notes.qazeer.io/active-directory/exploitation-credentials_theft_shuffling.md)
- [Exploitation - GPP and shares searching](https://notes.qazeer.io/active-directory/exploitation-gpp_and_shares_searching.md)
- [Exploitation - Kerberos Kerberoasting](https://notes.qazeer.io/active-directory/exploitation-kerberos_kerberoasting.md)
- [Exploitation - ACL exploiting](https://notes.qazeer.io/active-directory/exploitation-acl_exploiting.md)
- [Exploitation - GPO users rights](https://notes.qazeer.io/active-directory/exploitation-gpo_users_rights.md)
- [Exploitation - Active Directory Certificate Services](https://notes.qazeer.io/active-directory/exploitation-certificate_services.md)
- [Exploitation - Kerberos tickets usage](https://notes.qazeer.io/active-directory/exploitation-kerberos_tickets_usage.md)
- [Exploitation - Kerberos silver tickets](https://notes.qazeer.io/active-directory/exploitation-kerberos_silver_tickets.md)
- [Exploitation - Kerberos delegations](https://notes.qazeer.io/active-directory/exploitation-kerberos_delegations.md)
- [Exploitation - gMS accounts (gMSAs)](https://notes.qazeer.io/active-directory/exploitation-gms_accounts.md)
- [Exploitation - Azure AD Connect](https://notes.qazeer.io/active-directory/exploitation-azure_ad_connect.md)
- [Exploitation - Operators to Domain Admins](https://notes.qazeer.io/active-directory/exploitation-operators_to_domain_admins.md)
- [Post Exploitation - ntds.dit dumping](https://notes.qazeer.io/active-directory/post_exploitation-ntds_dit_dumping.md)
- [Post Exploitation - Kerberos golden tickets](https://notes.qazeer.io/active-directory/post_exploitation-kerberos_golden_tickets.md)
- [Post Exploitation - Trusts hopping](https://notes.qazeer.io/active-directory/post_exploitation-trusts_hopping.md)
- [Post Exploitation - Persistence](https://notes.qazeer.io/active-directory/post_exploitation-persistence.md)