The article introduces a free, open‑source Active Directory enumeration mindmap that visualizes every AD attack path—from user and computer discovery to Kerberos and BloodHound data collection—providing red‑team practitioners with a systematic, fast, and comprehensive reconnaissance workflow.
The Certighost vulnerability (CVE‑2026‑54121) in Microsoft Active Directory Certificate Services allows a regular domain user to impersonate a domain controller, obtain a certificate, perform DCSync, and fully compromise an AD forest, with a publicly released PoC and detailed mitigation steps.
Modern office printers act as hidden entry points to internal networks, with default credentials, open ports, and plaintext transmissions enabling attacks such as Pass‑Back credential harvesting, SNMP data extraction, firmware RCE, and ultimately full Active Directory compromise.
This article demonstrates how to conduct a full Active Directory penetration test using HexStrike AI, Claude Desktop, and NetExec, where natural‑language prompts replace manual commands to enumerate users and groups, perform AS‑REP and Kerberoasting attacks, crack hashes, spray passwords, gain Domain Admin rights, extract credentials, establish persistence, and finally provide defensive recommendations based on the observed artifacts.
ADPulse is an open‑source, read‑only Active Directory security scanner that runs 35 built‑in checks, provides a 100‑point risk score, supports Pass‑the‑Hash authentication, and generates console, JSON, or self‑contained HTML reports with a single command, making it suitable for quick AD health assessments and penetration‑test reconnaissance.
The article explains how misconfigured Active Directory DACL entries enable five distinct privilege‑escalation paths—ForceChangePassword, FullControl on Domain Admins, DCSync, WriteMembers, and GUID‑based ACE writes—demonstrating each step with impacket commands, showing detection events, and offering concrete defense recommendations.
This article explains how Active Directory domains work, outlines over 220 attack techniques such as SPN scanning, password spraying, Kerberoasting, DCSync, and privilege‑escalation exploits, and then presents comprehensive defense measures including attack‑surface reduction, strict admin hygiene, network isolation, honeypots, and continuous monitoring.
This guide walks you through setting up LDAP authentication for Zabbix, covering Active Directory OU creation, Zabbix server LDAP module verification, configuration parameters, user provisioning, fallback to internal authentication, and the related database tables and SQL commands.
In this step‑by‑step guide, Microsoft MVP Li Sida shows how to build a two‑node SQL Server cluster on Tencent Cloud by creating a private VPC, setting up an Active Directory domain controller, configuring shared storage, joining the SQL nodes, and addressing common Chinese‑cloud quirks such as sysprep and SID duplication.
This article analyzes whether enterprises should adopt Active Directory domains by presenting a survey of 110 companies, highlighting the reasons for and against domain integration, and sharing expert opinions on the benefits, risks, and management considerations involved.
This guide demonstrates how to create a linked server to Active Directory in SQL Server, query user and group information via T‑SQL, and store the results in database tables for further analysis with TFS data.
