Active Directory:
Vulnerability Discovery
Find ADCS flaws, password policies, and NTLM relay targets in AD
Delegation Misconfiguration Discovery
Identifies Kerberos delegation misconfigurations in Active Directory, including unconstrained, constrained, and resource-based delegation vulnerabilities enabling privilege escalation.
Password Policy and Spray Surface
Enumerate AD password policies to identify weak settings and assess exposure to password spraying attacks across domain accounts.
ADCS Misconfiguration Discovery
Techniques for identifying misconfigured Active Directory Certificate Services, including vulnerable certificate templates, enrollment permissions, and ESC attack paths.
NTLM Relay Conditions
Covers conditions enabling NTLM relay attacks in AD environments, including signing requirements, EPA configurations, and protocol-level mitigations to assess.