# Internal Pentest

## Internal Pentest

- [Active Directory](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory.md): Active Directory Attacks
- [Core Concepts](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction.md): This page is an intro to basic concepts of active directory
- [Domain Controllers](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/domain-controllers.md)
- [AD DS Data Store](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/ad-ds-data-store.md)
- [AD DS Schema](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/ad-ds-schema.md)
- [Attributes](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/attributes.md)
- [Containers and Leaves](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/untitled.md)
- [Object Names and Identities](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/object-names-and-identities.md)
- [Directory Partitions/Naming Contexts](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/directory-partitions-naming-contexts.md)
- [Oraganizational Units, Namespaces, domains, domain trees, forests and trust relationships](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/introduction/namespaces-domain-trees-and-forests.md)
- [Reconnaissance](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/domain-name-and-domain-controllers.md): This page discusses ways of finding Domain names and Domain Controllers ... with or without a domain user, depending on the situation you're in.
- [Initial attack vectors](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors.md)
- [LLMNR/NBT-NS Poisoning](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/llmnr-nbt-ns-poisoning.md)
- [Intercept and Hashcat](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/llmnr-nbt-ns-poisoning/intercept-and-hashcat.md)
- [SMB relay](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/llmnr-nbt-ns-poisoning/smb-relay.md)
- [IPv6 Attacks](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/ipv6-attacks.md)
- [Basic attack](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/ipv6-attacks/basic-attack.md): This page describes how you can compromise IPv4 networks via IPv6
- [Combining NTLM Relaying and Kerberos delegation](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/ipv6-attacks/combining-ntlm-relaying-and-kerberos-delegation.md)
- [Other attack vectors and strategies](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/ipv6-attacks/other-attack-vectors-and-strategies.md)
- [ASREPRoast](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/asreproast.md)
- [ADCS + PetitPotal NTLM Relay](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/initial-attack-vectors/adcs-+-petitpotal-ntlm-relay.md)
- [Post-Compromise Enumeration](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/reconnaissance.md): This following pages discuss enumeration techniques once you have compromised an account/accounts and you have footstep in the network
- [Powerview](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/reconnaissance/powerview.md)
- [PingCastle](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/reconnaissance/pingcastle.md)
- [BloodHound](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/reconnaissance/bloodhound.md)
- [Other](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/reconnaissance/other.md)
- [Post-Compromise Attacks](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks.md)
- [Pass the Password](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/pass-the-password-pass-the-hash.md)
- [Pass the hash](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/pass-the-hash.md)
- [Token impersonation](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/token-impersonation.md)
- [ASREPRoast](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/asreproast.md)
- [Kerberoasting](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/kerberoasting.md): This page deals with compromising Active Directory with Kerberoast attack.
- [DCSync](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/dcsync.md): Extracting User Password Data
- [DCShadow](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/dcshadow.md)
- [GPP attacks](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/gpp-attacks.md)
- [Golden tickets](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/golden-tickets.md)
- [PrintNightmare](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/printnightmare.md)
- [Other Lateral movements and attacks](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/post-compromise-attacks/other-lateral-movements-and-attacks.md)
- [MISC](https://xedex.gitbook.io/internalpentest/internal-pentest/active-directory/misc.md): This page contains a collection of interesting links to cheat sheets, an assembly of articles ... that are useful as i covered only the basics
- [Microsoft AZURE](https://xedex.gitbook.io/internalpentest/cloud-pentesting/azure.md)
- [Definitions and fundamentals](https://xedex.gitbook.io/internalpentest/cloud-pentesting/azure/definitions-and-fundamentals.md): This page is about general definitions and cloud/azure fundamentals
- [AWS](https://xedex.gitbook.io/internalpentest/cloud-pentesting/microsoft-azure.md)