ACL abuse (BloodHound)
GenericWrite/GenericAll/WriteDACL found with BloodHound. Used in 33 machines, sorted from easiest to hardest. The ▶ link takes you to the minute of the video where it is used.
Cheatsheets and tools
- Cross-Site Scripting (XSS)
- CSRF
- SQL injection
- SSRF
- Saved credentials / DPAPI
- ADCS (certificates)
- NTLM capture and relay
- Pass-the-hash / ticket
- Password spraying and valid users
- Credentials in files
- Internal services and port forwarding
- SAM/LSA/LSASS dumping
- ACL abuse (BloodHound)
- GPP and GPO abuse
- Hash cracking