Active Directory Cheatsheet

1๏ธโƒฃ Active Directory Cheatsheet Perform user hunting to track down where users are logged into in the network - find users that are members of high-value groups. Dump credentials and/or obtain Kerberos tickets. Gain access to the userโ€™s machine using creds/ticket. (Possibly) escalate privileges in the machine. Repeat steps above until you have administrative privileges in the Domain Controller. ๐Ÿ“œAD Enumeration - Users / Groups / Computers ์ƒ์œ„ ๊ถŒํ•œ์„ ๊ฐ€์ง„ user ์ฐพ๊ธฐ ๋ฉ”์„œ๋“œ ์„ค๋ช… onCreate() ์•กํ‹ฐ๋น„ํ‹ฐ ์ƒ์„ฑ ์‹œ ํ˜ธ์ถœ, ํ™”๋ฉด์— ๋ณด์ด๋Š” ๋ทฐ์˜ ์ผ๋ฐ˜์ ์ธ ์ƒํƒœ๋ฅผ ์„ค์ • onStart() ์•กํ‹ฐ๋น„ํ‹ฐ๊ฐ€ ์‚ฌ์šฉ์ž์—๊ฒŒ ํ‘œ์‹œ๋˜๊ธฐ ์ง์ „์— ํ˜ธ์ถœ onResume() ์•กํ‹ฐ๋น„ํ‹ฐ๊ฐ€ ์‚ฌ์šฉ์ž์™€ ์ƒํ˜ธ์ž‘์šฉ ํ•˜๊ธฐ ์ „์— ํ˜ธ์ถœ onPause() ์‹œ์Šคํ…œ์ด ๋‹ค๋ฅธ ์•กํ‹ฐ๋น„ํ‹ฐ๋ฅผ ์žฌ๊ฐœํ•˜์ง€ ์ง์ „์— ํ˜ธ์ถœ onStop() ์•กํ‹ฐ๋น„ํ‹ฐ๊ฐ€ ๋”์ด์ƒ ์‚ฌ์šฉ์ž์—๊ฒŒ ํ‘œ์‹œ๋˜์ง€ ์•Š์„ ๋•Œ ํ˜ธ์ถœ onDestroy() ์•กํ‹ฐ๋น„ํ‹ฐ ์†Œ๋ฉธ ์ „์— ํ˜ธ์ถœ(๋งˆ์ง€๋ง‰ ํ˜ธ์ถœ) ๐Ÿ“œ**์•กํ‹ฐ๋น„ํ‹ฐ Flow !...

March 14, 2023 ยท CrackerNote