Windows Privesc Volume Shadow Copies (VSS) for Credential and File Recovery
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
DCSync
Windows Privesc 
Active Directory Active Directory Trust Attacks: SID History and Cross-Forest Escalation
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory DCSync Attack and Defense: Abusing Directory Replication Rights
How DCSync abuses AD replication rights via DRSUAPI to dump credentials, and how blue teams can detect and stop it.