vlad/reverse-skills-max
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

reverse-skills-max: initial public release (restored, redacted, hardened)

Browse Source
This commit is contained in:
baradok609hecl1pq6qi
2026-10-20 02:17:15 +03:00
commit da24c2bd20
2227 changed files with 443931 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
reverse-skill-repo/skills/windows-ad/references/ad-attack-paths.md Normal file
View File

@@ -0,0 +1,12 @@
# AD 攻击路径速查
| 路径 | 前提 | 工具线索 |
|------|------|----------|
| Kerberoast | SPN 账户 | GetUserSPNs / Rubeus |
| AS-REP Roast | 不要求预认证 | GetNPUsers |
| ESC1 | 可注册模板 + 可伪造SAN | Certipy |
| ESC8 | HTTP enrollment + 中继 | ntlmrelayx |
| ACL → DA | GenericAll on user/group | BloodHound |
| NTLM Relay | 签名未强制 | Responder + relay |
始终：授权 → 枚举 → 路径评分 → 最小验证 → 清理。