Security SMB Security: Signing, Encryption, and the SMBv1 Legacy
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
NTLM Relay
Security 
Security Link-Local Name Resolution (LLMNR/NBT-NS/mDNS): Risks and Hardening
Disclaimer: This article is provided strictly for educational purposes and authorized security testing. Only run these t...
Active Directory NTLM Relay Attacks in Practice: Hands-On with ntlmrelayx
A practical walkthrough of NTLM relay attacks with Responder and ntlmrelayx, covering SMB and LDAP relay plus blue-team defenses.
Active Directory ADCS Attacks: A Practical Overview of ESC1 Through ESC8
A field guide to Active Directory Certificate Services attacks ESC1-ESC8, with Certipy commands and Blue Team defenses.
Active Directory PetitPotam and Coercion Attacks: Forcing Authentication and Relaying to AD CS
How PetitPotam coerces machine authentication via MS-EFSRPC and relays it to AD CS for domain compromise — with detection and defense.