Skip to content

Main Navigation Home

Appearance

Sidebar Navigation

Cryptography

Brute Force

Custom Wordlist

Hashcat

Optimization

Rules

John

MISC

Xor

Zip Weakness

Linux

Privilege Escalation

Docker Breakout

NFS

Network

Pivoting

Port Forwarding

SSH Tunneling

Tor Proxying

Recon

Nmap

NSE Scripts

Services Pentesting

21 FTP

53 DNS

DNS Attack

DNS Rebinding

DNS Enumeration

389 / 636 LDAP

445 SMB

RDP 3389

Pentest Basics

Databases

Mssql

Mysql

Postgresql

Wordlist

Web Pentest

CMS

Wordpress

File Inclusion

Edge Side Includes

File Upload

Lfi 2 Rce

Wrappers

Injection

Command Injection

Headers Injection

Server Side Request Forgery

SQL Injection

SQLi Intruder Payloads

SQLmap

XSS Injection

Content Security Policy

Dangling Markup

XSS Filter Bypass

XSS Payloads

MISC

Bypass

Cross Site Websocket Hijacking

Git Pentesting

Java Spring Boot

Json Web Token

Jwt Tool

Misconfiguration

Nginx Misconfiguration

PHP

PHP Tricks

X Debug

Serialize

Node Serialize

Windows

Active Directory

AD Enumeration

AD Userenum

Ad Recon

Kerberos

As Rep Roasting

Post Exploit

Ad User Pivot Cheatsheet

Relays Attacks

Kerberos Relays

Ntlm Relays

Tools

Crackmapexec

Impacket

On this page

AD - Recon

Resources

Tools

ADRecon - Github tool

Basic Recon

bash

# enum4linux
enum4linux -a $IP

# next gen (golang)
enum4linux-ng -a $IP

Pager

Previous pageAD Userenum

Next pageKerberos