Vulnerability Discovery

Delegation Misconfiguration Discovery

Identifies Kerberos delegation misconfigurations in Active Directory, including unconstrained, constrained, and resource-based delegation vulnerabilities enabling privilege escalation.

Jun 11, 2026 • 3 min read

Password Policy and Spray Surface

Enumerate AD password policies to identify weak settings and assess exposure to password spraying attacks across domain accounts.

Apr 30, 2026 • 3 min read

ADCS Misconfiguration Discovery

Techniques for identifying misconfigured Active Directory Certificate Services, including vulnerable certificate templates, enrollment permissions, and ESC attack paths.

Apr 30, 2026 • 7 min read

NTLM Relay Conditions

Covers conditions enabling NTLM relay attacks in AD environments, including signing requirements, EPA configurations, and protocol-level mitigations to assess.

Apr 30, 2026 • 3 min read