Exploits related to Windows

Active Directory

AD CS (Active Directory Certificate Services) Pentesting

AS-REP Roasting

Active Directory Pentesting

BloodHound SharpHound for Active Directory

Kerberos Pentesting

LAPS (Local Administrator Password Solution) Pentesting

LDAP (Lightweight Directory Access Protocol) Pentesting

LDAP Injection

NTLM (New Technology LAN Manager) Pentesting

Netlogon Elavasion of Privilege

SMB (Server Message Block) Pentesting

Protocol

MSRPC (Microsoft Remote Procedure Call) Pentesting

RDP (Remote Desktop Protocol) Pentesting

WinRM (Windows Remote Management) Pentesting

Privilege Escalation

Iperius Backup Service Privilege Escalation

ManageEngine ADSelfService Plus PrivEsc

Mimikatz

Outlook Reminder Privilege Escalation

UAC Windows Privilege Escalation

Windows PrivEsc with Potatoes

Windows PrivEsc with Registry Keys

Windows PrivEsc with SeBackupPrivilege

Windows PrivEsc with Unquoted Service Path

Windows Privilege Escalation

Post Exploitation

Windows Pivoting

PowerShell

PowerShell

PowerView

Others

Dumping Windows Password Hashes

LocalPotato

M365 (Microsoft Office 365) Pentesting

Microsoft Outlook Message (.msg)

Microsoft Word Pentesting

Reading OneDrive Logs

WSL Pentesting

Windows API

Windows Disk Management

Windows Forensics

Windows Memory Dump Analysis

Windows Pivoting

Windows Print Spooler Service

Windows Remote Code Execution from Linux

Windows XML EventLog (EVTX)

Netlogon Elavasion of Privilege

Last modified: 2023-02-08

Active Directory Windows

It is a vulnerability to elevate of privilege in Windows Netlogon using the Netlogon Remote Protocol (MS-NRPC). It’s called Zerologon (CVE-2020-1472).

Exploitation

There is a lot of Poc in online.
Here, we’ll use this repository from GitHub.

Tools by HDKS

Automatic web fuzzer.

Auto reconnaissance CLI.

Hash identifier.