Active Directory Attack Paths
Enumerate, capture credentials, escalate, move laterally, and reach Domain Admin: Kerberoasting, AS-REP roasting, NTLM relay, AD CS (ESC1-ESC16), DACL/ACL abuse, delegation, DCSync, and golden/silver tickets.
HackGraph Reference
HackGraph is an open-source cybersecurity reference and study notes for offensive security. It maps attack paths as interactive, click-to-expand graphs that run from a foothold to Domain Admin or root. Every technique lists the commands to run, the tools it uses, detection and OPSEC notes, and links to primary sources. It works as notes for penetration testing, red teaming, and CTFs, for OSCP, OSEP, CRTP, CRTE, and PNPT prep, and as a detection reference for blue teams.
Windows Privilege Escalation
From a foothold to NT AUTHORITY\SYSTEM: token privileges (SeImpersonate, Potato), UAC bypass, service and DLL misconfigurations, unquoted paths, stored credentials, privileged groups, and defense evasion (AMSI, EDR, AppLocker).
Linux Privilege Escalation
From an unprivileged shell to root: sudo abuse and GTFOBins, SUID/SGID and capabilities, cron and systemd jobs, writable files, credential hunting, privileged groups and container escapes, and kernel exploits.