Skip to main content

Ad domain

Domain Info
#

Domain / DC / Scope
#

Domain:
DC-IP:
DC-Hostname:
Initial creds:
Time synced:

Hosts
#

IP | Hostname | Role | Access | Notes

Working Credentials
#

user | pass/hash/ticket | source | where it works

Spray Results
#

password | users tried | hits | notes

Local Admin / High-Value Access
#

host | user | local admin? | winrm | rdp | mssql | notes

Logged-on Users / Sessions
#

host | privileged user seen | source (quser/qwinsta/etc) | notes

Shares / Loot
#

host | share | access | useful files / creds

Kerberos Findings
#

AS-REP:
Kerberoast:
Tickets:

LDAP / BloodyAD Findings
#

interesting groups:
interesting users:
writable objects:
delegation:
gpo / acl path:

Attack Chain
#

current foothold:
next smallest abuse step:
blocked by: