# Methodology & Cheatsheet

## Checklist

&#x20;<https://thecyphere.com/wp-content/uploads/2024/05/Internal-penetration-testing-checklist.pdf>

{% embed url="<https://github.com/six2dez/pentest-book/blob/master/others/internal-pentest.md>" %}

## Guide

{% embed url="<https://www.login-securite.com/2024/06/10/enfin-comprendre-les-vecteurs-dattaques-active-directory-un-guide-des-vulnerabilites-et-configurations-dangereuses-partie-i/>" %}

{% embed url="<https://zer1t0.gitlab.io/posts/attacking_ad/>" %}

{% embed url="<https://drive.google.com/file/d/1NbLPfUUSPb_xGsmMfkjAGp0SYVTU4YaW/view>" %}

{% embed url="<https://www.youtube.com/watch?feature=youtu.be&si=vA8jwNTy0v8Xg_rZ&v=M-2d3sM3I2o>" %}

## MindMap

{% embed url="<https://orange-cyberdefense.github.io/ocd-mindmaps/img/mindmap_ad_dark_classic_2025.03.excalidraw.svg>" %}

<figure><img src="https://raw.githubusercontent.com/esidate/pentesting-active-directory/a8e37705542720cb1f9b65ec9039f67b70b61ca6/v2/pentesting_active_directory.svg" alt=""><figcaption><p>Source: Orange Cyberdefense - MayFly : <a href="https://raw.githubusercontent.com/esidate/pentesting-active-directory/a8e37705542720cb1f9b65ec9039f67b70b61ca6/v2/pentesting_active_directory.svg">https://raw.githubusercontent.com/esidate/pentesting-active-directory/a8e37705542720cb1f9b65ec9039f67b70b61ca6/v2/pentesting_active_directory.svg</a></p></figcaption></figure>

<figure><img src="https://4199783661-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFF3hT6DtJlHn9jAel9%2Fuploads%2FJy7duQlR6QV8FKnudg8l%2FActive-Directory-Penetration-Manual.png?alt=media&#x26;token=d4b1710e-9dc8-4236-88de-960ccdf5b1d9" alt=""><figcaption><p>Source: <a href="https://tajdini.net/blog/wp-content/uploads/2021/09/Active-Directory-Penetration-Manual.png">https://tajdini.net/blog/wp-content/uploads/2021/09/Active-Directory-Penetration-Manual.png</a></p></figcaption></figure>

<figure><img src="https://4199783661-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFF3hT6DtJlHn9jAel9%2Fuploads%2Fv44VAloKRdL4gP58418m%2FActive%20Directory.png?alt=media&#x26;token=ce100442-1730-42ca-b63f-7a268fa3ad78" alt=""><figcaption></figcaption></figure>

Ref: [https://xmind.app/m/vQuTSG/#](https://xmind.app/m/vQuTSG/)

### ADMR

Active Directory Mind Map from OCD + The Hacker Recipes

{% embed url="<https://github.com/Imp0sters/ADMR>" %}

## Cheatsheet

{% embed url="<https://github.com/ZishanAdThandar/pentest/blob/main/notes/ActiveDirectory.md>" %}

{% embed url="<https://github.com/0xn1k5/Red-Teaming>" %}

### LOLAD

{% embed url="<https://lolad-project.github.io/>" %}

### WADComs

{% embed url="<https://wadcoms.github.io/>" %}

### Arsenal

{% embed url="<https://github.com/Orange-Cyberdefense/arsenal>" %}

On exegal hit "a"

<figure><img src="https://4199783661-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MFF3hT6DtJlHn9jAel9%2Fuploads%2FUz48WRh2W5pxVPmTjine%2Fimage.png?alt=media&#x26;token=64a069ac-4f03-49b3-913f-3ca32d77b606" alt=""><figcaption></figcaption></figure>
