Active Directory Attack

It handles the full offensive toolkit: BloodHound enumeration to map attack paths, Kerberoasting and AS-REP roasting for credential cracking, NTLM relay attacks when SMB signing is off, and Golden/Silver ticket generation once you've got the KRBTGT hash. The workflow is thorough, covering everything from clock sync issues (Kerberos is picky) to DCSync for dumping domain credentials. It's built around Impacket, Rubeus, Mimikatz, and CrackMapExec, so you're not reinventing the wheel. The OPSEC section is worth reading before you lock out half the domain with password spraying. If you're doing internal pentests or red team engagements against Active Directory, this consolidates the playbook you'd otherwise be pulling from six different blog posts.