JustGetDA

JustGetDA, a cheat sheet which will aid you through internal network & red team engagements.

AD Mindmap

Credit:

mayfly (@M4yFly)

Privilege Escalations

The below privilege escalations are inspired from: https://github.com/cfalta/MicrosoftWontFixList

Local Privilege Escalation:

• InstallerFileTakeOver: https://github.com/klinix5/InstallerFileTakeOver
• SeriousSAM / HiveNightmare: https://github.com/GossiTheDog/HiveNightmare
• Potato: https://github.com/d4rckh/WindowsPotatoes

Domain Privilege Escalation:

• PetitPotam: https://github.com/topotam/PetitPotam
• samAccountName Spoofing: https://github.com/cube0x0/noPac / https://github.com/WazeHell/sam-the-admin
• PrintNightmare: https://github.com/cube0x0/CVE-2021-1675
• ZeroLogon: https://github.com/dirkjanm/CVE-2020-1472 / https://github.com/risksense/zerologon / https://github.com/SecuraBV/CVE-2020-1472
• ADCS (Certified Pre-Owned): https://posts.specterops.io/certified-pre-owned-d95910965cd2
• NoPac: https://github.com/cube0x0/noPac

Misc

KrbRelay: https://github.com/cube0x0/KrbRelay