Active Directory Attack Cheat Sheet, 2026

A complete visual roadmap of modern Active Directory attack chains ⚠️

⚡️ Covers Full Attack Flow
🔍 Recon & Enumeration
🔐 Credential Access (Kerberoast, NTLM Relay, Spray)
🚀 Privilege Escalation (ACL Abuse, ADCS, GPO Abuse)
🌐 Lateral Movement (Pass-the-Hash, WinRM, SMBExec)
🛡 Persistence (Shadow Creds, Golden/Silver Tickets)
💥 Domain Dominance (DCSync, Trust Abuse, Forest Takeover)

💡 Modern AD attacks follow structured attack paths — moving from initial access to full domain compromise through misconfigurations, weak ACLs, delegation abuse, and credential attacks

#windows #pentest