CRTP Resources

• Active Directory Attacks and Enumeration
• Building a Lab

Repos

• AD Enumeration Scripts
• PrivEsc
• Tool dump

Tools

• GhostPack binaries
• Impacket
• Impacket Win binaries
• Nishang
• PowerSploit

Pentesting

• OSCP Checklists

Other resources

Tools

Sharp precompiled binaries - https://github.com/Flangvik/SharpCollection

a smaller selection of precompiled binaries - https://github.com/tijme/binaries

CrackMap - https://github.com/Porchetta-Industries/CrackMapExec

PowerSharp Pack - https://github.com/S3cur3Th1sSh1t/PowerSharpPack/tree/master

Many more AD Tools and Commands - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Active%20Directory%20Attack.md

Other CRTP Cheatsheets

https://github.com/0xJs/CRTP-cheatsheet

https://github.com/0xJs/CRTE-Cheatsheet/blob/main/Lateral-Movement.md

https://github.com/idnahacks/AD_attack_defend_cheatsheet

Other AD cheatsheets

https://github.com/Sp4c3Tr4v3l3r/OSCP/blob/main/Active%20Directory.md

https://github.com/In3x0rabl3/OSEP/blob/main/osep_reference.md#unconstrained-delegation

---

Azure - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Cloud%20-%20Azure%20Pentest.md

AWS - https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Cloud%20-%20AWS%20Pentest.md#aws---gaining-aws-console-access-via-api-keys