My Pentesting Cheatsheet

Home
Commands Only Summary
- Some other cool websites
Preparation
Information Gathering
Vulnerability Assessment
Pentesting Machine
Enumeration
- NMAP Scan types explained
- Firewall and IDS/IPS Evasion
Footprinting
Web Information Gathering
Vulnerability Assessment
File Transfers
Shells & Payloads
- Reverse Shells + Bind + Web
Password Attacks
Attacking Common Services
Pivoting, Tunneling, and Port Forwarding
Active Directory Enumeration & Attacks
Using Web Proxies
Login Brute Forcing
SQL Injection Fundamentals
- Mitigating SQL Injection
SQLMap Essentials
Cross-Site Scripting (XSS)
- Prevention
File Inclusion
File Upload Attacks
Command Injections
- Exploitation
- Filter Evasion
Web Attacks
Attacking Common Applications
Privilege Escalation
Documentation & Reporting
- Preparation
- Reporting
Attacking Enterprise Networks
Deobfuscation
Metasploit
- msfvenom
Custom compiled files
XSS
Azure AD (Entra ID)

Powered by GitBook

On this page

Access Control List (ACL) Abuse Primer
Access Control List (ACL) Overview
Access Control Entries (ACEs)
Why are ACEs Important?
ACL Attacks in the Wild
ACL Enumeration
Enumerating ACLs with PowerView
Enumerating ACLs with BloodHound
ACL Abuse Tactics
Example Scenario
Cleanup
Detection and Remediation
DCSync
What is DCSync and How Does it Work?

Active Directory Enumeration & Attacks

Access Control List (ACL)

PreviousKerberoasting - Cooking with Fire NextAdvanced Privilege Escalation in Active Directory: Stacking The Deck

Last updated 5 months ago