AD Attack Paths
Lessons
Attack Map
Beta
Legend
External / No Auth
Network Access
Domain User
Local Admin
Domain Admin
AS-REP
Zerologon
LLMNR
WPAD
Relay SMB
Relay LDAP
Relay ADCS
PetitPotam
PrinterBug
DFSCoerce
Kerberoasting
Start Here
GPP
Target Kerb
Shadow Creds
SPN-Jack
RBCD
ESC1
ESC4
ESC8
PtH
PtT
OPtH
Unconstr. Deleg
Constr. Deleg
DNSAdmins
Silver Ticket
DCSync
DCShadow
Golden Ticket
Skeleton Key
AdminSDHolder
SID History
DPAPI BK
Trust